Module 4: CI/CD & Release Engineering: Guided Labs

Lab 1: Releasable Trunk

Use short-lived changes, required tests, secret/dependency scans, and feature flags. Measure commit-to-production lead time.

Lab 2: Trusted Artifact

Build once, create SBOM/provenance, scan and sign, then promote the same digest. Block a tampered or unsigned artifact.

Lab 3: Progressive Delivery

Release to a canary, compare SLIs, inject regression, and prove automatic abort plus rollback.

Lab 4: Current DORA Baseline

Instrument the five current delivery metrics for one service, validate definitions with the team, and run one small-batch improvement experiment.

Evidence: workflows, artifact attestations, canary decision record, metric definitions, and before/after data.