Why dont companies host their own CI anyways.. Its really not that complicated. I see companies spending 20k a month on github actions.. It makes no sense to me.
We migrated to GitLab a while back, and run Buildkite for CI.
Our public mirrors for open source stuff that results in built binaries that we ship is built on GitHub Actions from the public GitHub mirror so we have build attestation from the source.
Acknowledging that developers are in fact customers, is often where it comes undone in my experience.
In a lot of places, only revenue paying people are considered customers, everyone else is a cost centre.
Dev tools are often seen as a tax the business pays to be able to generate revenue. Investing in them, or treating them like the production level systems they are, isn’t intuitive for most, and for some a hard cost to justify.
Our CI is broken at the moment, unable to download tools used in various checks (gitleaks, etc).
reply