Ship it: the line

The harbour’s assembly line: every push runs build, test, scan, package and ship, and a red station stops the line. This lesson builds that line for one small app, station by station, and runs it.

Before you start. The Assembly Line (CI/CD) gave you the line itself: every change is built once into an image, a sealed copy of the app and everything it needs, and the same image moves on toward production. The part someone else made gave you the checks on that image: a scan for known holes, a digest that names the exact bytes, and a signature that proves who shipped them. Git: the ledger every change signs (commits, branches, merge and rebase) gave you the commit, one saved change with its own id, which is what starts the line.