Skip to main content

Platform & Infrastructure · Checklist

CI/CD pipeline review checklist

Twenty checks to run on any pipeline before you trust it with production: speed, safety, secrets and rollback.

H
Halima Yusuf Sample 15 Oct 2026
CI/CD GitHub Actions

Speed

  • [ ] Dependencies are cached between runs
  • [ ] Tests run in parallel where they can
  • [ ] The pipeline fails fast: lint and unit tests before slow jobs

Safety

  • [ ] Main is protected; merges need a green build and a review
  • [ ] Deploys to production need an approval step
  • [ ] Every deploy is tagged with the commit it shipped

Secrets

  • [ ] No secret is printed in logs (masking checked)
  • [ ] Secrets are scoped to the environment that needs them
  • [ ] Third-party actions are pinned to a commit SHA

Rollback

  • [ ] One command (or button) rolls back the last deploy
  • [ ] Database migrations are backwards compatible for one release
  • [ ] The rollback was rehearsed in the last 90 days