Tutorial: Shifting Your CI to GitHub Actions with Docker Multi-Stage Build and Secrets Scanning

Tiexin Guo
4th Coffee
Published in
11 min readAug 31, 2021

--

Author’s note: this is more of a tutorial-style article with working code examples to showcase the power of modern CI tools, Docker, multi-stage build, and secrets scanning tools to automate your software development process and enhance security simultaneously. We will also cover the daemon-less Docker build, albeit there will be no examples for that.

TL;DR: all the code used in this article can be found in this repo:

For beginners or people who just got started with DevOps, I highly suggest that you follow this article because I’ve prepared several pull requests to show how everything is evolved and what’s the logic behind the evolvement.

A Story

Once I was working in an agile team within a big corporation. The team was meant to be an experiment, to build something cool and fast in an unconventional way and an “A-team” so that the culture and the way of working could be preached to other teams as the kick-off of the digital transformation in…

--

--