Buildkite runs tests and builds images after pushes to main, then GitHub Actions runs infrastructure security checks and starts deployments. Failed checks block deployment and notify the commit author in Slack; CI continues on later pushes while fixes are applied.
Key points
Push to main triggers Buildkite to run tests and build images.
GitHub Actions runs security checks, blocks deployment on failure, and pings the commit author in Slack.
Sources
Base64 secret key trailing '=' may break awk split in .env
Base64 string format as secret key is poisonous, because the trailing '=' may bite your users who use naive awk to get the second substring with a split char '=' from a .env file. The issue arises when parsing .env files with awk using '=' as delimiter.
Key points
Issue: trailing '=' in Base64 secret key
Impact: awk split on '=' returns incorrect substring in .env files