Sources

Authoritative Sources

The definitions, principles, and practices in this pack are grounded in the following primary and widely recognised sources. Where a concept has a canonical originator or maintained specification (for example DORA metrics, the OCI image format, or OpenTelemetry), the original or official reference is cited.

CI/CD Platforms and Pipelines

  • GitHub Actions Documentation - GitHub. https://docs.github.com/en/actions
  • GitLab CI/CD Documentation. https://docs.gitlab.com/ee/ci/
  • Jenkins User Documentation. https://www.jenkins.io/doc/
  • Argo CD Documentation (GitOps continuous delivery for Kubernetes). https://argo-cd.readthedocs.io/en/stable/
  • Flux Documentation (GitOps toolkit). https://fluxcd.io/flux/

Containers and Orchestration

  • Docker Documentation (build, Dockerfile, multi-stage builds). https://docs.docker.com/
  • Kubernetes Documentation (concepts, deployments, probes). https://kubernetes.io/docs/home/
  • Open Container Initiative (OCI) Specifications. https://opencontainers.org/
  • Helm Documentation (the Kubernetes package manager). https://helm.sh/docs/

Infrastructure as Code

  • Terraform Documentation - HashiCorp. https://developer.hashicorp.com/terraform/docs
  • Pulumi Documentation. https://www.pulumi.com/docs/
  • Ansible Documentation - Red Hat. https://docs.ansible.com/

Reliability, Metrics, and Observability

  • Google Site Reliability Engineering Book (SLI/SLO/SLA, error budgets, toil). https://sre.google/sre-book/table-of-contents/
  • DORA - DevOps Research and Assessment (Four Keys, State of DevOps reports). https://dora.dev/
  • OpenTelemetry Documentation (traces, metrics, logs). https://opentelemetry.io/docs/
  • Prometheus Documentation (monitoring and alerting). https://prometheus.io/docs/introduction/overview/

Security and Supply Chain

  • OWASP DevSecOps Guideline. https://owasp.org/www-project-devsecops-guideline/
  • SLSA - Supply-chain Levels for Software Artifacts. https://slsa.dev/
  • Sigstore Documentation (cosign artifact signing). https://docs.sigstore.dev/
  • CycloneDX SBOM Specification. https://cyclonedx.org/specification/overview/
  • SPDX Specification (Software Package Data Exchange). https://spdx.dev/

Migrations and Delivery Patterns

  • Flyway Documentation (database migrations). https://documentation.red-gate.com/fd
  • Martin Fowler - Continuous Integration, Blue-Green Deployment, Canary Release, Feature Toggles. https://martinfowler.com/
  • The Twelve-Factor App methodology (config, build/release/run, dev/prod parity). https://12factor.net/