Menene sarrafawa abubuwa a CI/CD?

Question

Accepted Answer

**Abubuwa** su ne fitowar tsarin gina (nairai da aka duba, kulamai, hotuna na Docker) wanda ake bugi. **Sarrafawa abubuwa** — adana, yin sidar nau'i, da inyar wadannan abubuwa ta waje na njiya/ma'ajiyar kumfa — yana da mahimmanci don sauka masu aminci, mai nisa.

## Abubuwa mene ne

```text
The BUILD produces ARTIFACTS — the deployable outputs:
  → Docker IMAGES, compiled binaries, JARs/WARs, npm packages, zip bundles, etc.
→ These are what actually get DEPLOYED (not the source code directly).
```

## Njiya/Siringin adana abubuwa

```text
Artifacts are stored in REPOSITORIES/REGISTRIES (versioned, central storage):
  → Container registries: Docker Hub, AWS ECR, GitHub/GitLab Container Registry
  → Package repositories: npm registry, Maven, PyPI, Artifactory, Nexus
→ The pipeline BUILDS an artifact, PUSHES it to the registry, and DEPLOYS from there.
```

## Makasudin mahimmanci: gina sau daya, bugi ko'ina

```text
Build the artifact ONCE, then promote the SAME artifact through environments:
  build → artifact v1.2.3 → deploy to STAGING → (tested) → deploy SAME v1.2.3 to PROD
  ✓ what you TESTED in staging is EXACTLY what you deploy to production (no rebuild)
  ✗ rebuilding per environment risks differences (different deps, build env) → bugs
→ Versioned, immutable artifacts ensure consistency and traceability.
```

## Fa'idodi da jiyya

```text
✓ VERSIONING — each artifact tagged with a version → know exactly what's deployed
✓ TRACEABILITY — trace a deployed artifact back to its commit/build
✓ ROLLBACK — redeploy a previous artifact version easily
✓ IMMUTABILITY — artifacts don't change once built (consistent, reproducible)
✓ Retention/cleanup policies; scan artifacts for vulnerabilities
```

## Me yasa ya ta da mahimmanci

Sanin sarrafawa abubuwa yana da muhimmanci saboda **abubuwa su ne abin da ake bugi a gaske**, kuma sarrafafuwan da kyau yana da mahimmanci don sauka masu aminci, mai nisa, bisa daidai. **Abubuwa** (fitowar tsarin gina — hotuna na Docker, nairai, kulamai) su ne abin da ake bugi (ba keɗa tushe kaɗai) kuma adana su a **siringi mai nau'i** (njiya hotuna, ma'ajiyar kulamai) ita ce yadda injiya takan sarrafa su: gina abubuwa, tuking su zuwa njiya, da bugi daga can.

**Makasudin mahimmanci — gina sau daya, bugi ko'ina** — yana da muhimmanci musamman: gina abubuwa **sau daya** da inyar wadannan **abubuwan daya** ta cikin muhallin (tarewa sannan sarrafi) yana tabbatar da cewa **abin da ka gwada shi shi ne abin da kake bugawa** (babu sabon gina ko kowane muhal wanda zai iya kawo da bambanci daga dogon abubuwa ko muhallin gina, wanda zai kawo da kurakurai) — wata jiya mahimmanci don sauka masu aminci, bisa daidai wanda yaje karɓa matsalar "an aika a tarewa" da ita ta kawo daga sabon gina.

Sanin **fa'idodi** — **nau'i** (sanin abin da aka bugi a gaske), **ajali-bawa** (ajali bugawa da asali zuwa kumacin kaɓodin kaɗa a gida, wanda ya isa don samar a baye'a da duba), **sake juyawa** (sabon bugawa nau'i da jiya), da **bai canja ba** (abubuwa ba canja ba a lokacin da aka gina, tabbatar da sakin amfani), haɗa da jiyya kamar duba rashin lafiya — yana nuna yadda sarrafafuwan abubuwa na daidai ke goyan gida.
",