Tag: ci-cd

ko vs Jib vs Buildpacks

Build container images without writing a single Dockerfile — ko for Go, Jib for Java, Paketo Buildpacks for everything else. Real benchmarks, real tradeoffs.

Cosign Keyless: Sign Without Keys

Cosign keyless signing uses GitHub OIDC + Fulcio + Rekor to sign container images without managing private keys. Here's how it actually works and why you want it.

Docker Bake vs Compose Build

Orchestrating multi-image Docker builds: docker buildx bake vs compose build, matrix targets, multi-arch, caching, and when each one actually wins.

Docker BuildKit: Stop Building Images the Slow Way

Cache mounts, secret mounts, parallel stages — BuildKit turns your Dockerfile from a slow linear disaster into something that actually respects your time.