Lab → scenario

CI/CD stage ordering

Order stages for a containerized app with security gates.

Requirements

Stage order

lint → test → build → scan → deploy_staging → deploy_prod deploy_prod → test → lint scan → deploy_prod → test (no build)

Promotion model

Same image tag promoted staging → prod Rebuild from source separately per environment Always pull :latest at deploy time

Production gate

Manual approval or automated smoke tests on staging Auto-deploy every commit directly to prod Skip staging entirely