masterbranch is always production-ready, deployable, 100% green test suite- New development is done on feature branches, with frequent rebasing onto master
- Clean commit history by preferring to rebase instead of merge (
git pullis configured to automatically rebase)
leesmith
/ simple-git-workflow.md
Last active
December 30, 2023 23:37
Simple Git Workflow For Continuous Delivery
kzap
/ gist:5819745
Last active
July 14, 2024 16:13
If you want to give only Travis-CI access to a private key or secret file in your repository, you will need to encrypt it, but rather than storing the entire encrypted file in an environment variable, just store the a secret password in a secure environment variable that you will use to encrypt and decrypt your private key file. The encryption o…
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # generate your private key, put the public key on the server you will be connecting to | |
| ssh-keygen -t rsa -f ./my_key | |
| # generate the password/secret you will store encrypted in the .travis.yml and use to encrypt your private key | |
| cat /dev/urandom | head -c 10000 | openssl sha1 > ./secret | |
| # encrypt your private key using your secret password | |
| openssl aes-256-cbc -pass "file:./secret" -in ./my_key -out ./my_key.enc -a | |
| # download your Travis-CI public key via the API. eg: https://api.travis-ci.org/repos/travis-ci/travis-ci/key |