Book
SDLC, DevOps & Developer Experience
How software actually gets from a developer's machine to production: deployment strategies and the version-skew problem underneath them, infrastructure as code and the state file that runs everything, pipeline design that people do not route around, and the software supply chain link by link.
Written for platform, DevOps, SRE and developer-experience candidates. Every chapter names the failure mode, not just the practice.
CHAPTER 1
Getting code into production without breaking it
Five strategies, what each one genuinely costs, and the version-skew problem that makes most of them harder than they look.
CHAPTER 2
Infrastructure as code, and the state file that runs everything
Declarative versus imperative, why the plan is the artefact you review, and the three failure modes that are all really about state.
CHAPTER 3
Designing a pipeline people do not route around
Order stages by how fast they fail, cache the right thing, and measure the number that actually matters to a developer.
CHAPTER 4
DevSecOps and the software supply chain
Where security checks belong, the attack at each link of the chain, and the one question a supply-chain programme exists to answer.
CHAPTER 5
A testing strategy that survives a real codebase
The pyramid as a cost heuristic rather than a law, the layer almost everyone is missing, and how to decide what to test where.
CHAPTER 6
The internal platform, and whether anyone wants it
Golden paths versus gates, the test that tells you which one you built, and what to measure instead of teams onboarded.
CHAPTER 7
Day zero to the first pull request
The path a new developer actually travels in a regulated enterprise — and the metric that tells you whether your platform works.
CHAPTER 8
Large-scale migrations
The highest-value engineering skill nobody teaches, why rewrites fail for structural reasons, and the step everyone skips.
CHAPTER 9
The CI/CD platform landscape
Six pricing models that cannot be compared, what each platform is genuinely best and worst at, and the arbitrage most teams miss.
CHAPTER 10
Infrastructure as code: the tooling and the licence question
What the licence change actually restricts, the fork's point of no return, and the three 2025-26 events that mattered more than the licence fight did.
CHAPTER 11
Artifact registries, and what immutable actually means
Where your binaries live, the free tier that silently stops accepting them, and why 'we require immutable tags' is four different implementations.
CHAPTER 12
The security tooling landscape, and what the evidence supports
How each product is priced, what 'open source' is doing in the marketing, and the honest state of false-positive claims.
CHAPTER 13
Supply-chain standards, and who is actually regulating this
SLSA levels that changed, what signing actually gives you, and the regulatory reversal most material has not caught up with.
CHAPTER 14
Progressive delivery and feature flags, in the market
Two controllers you choose by your GitOps engine, a pricing model that just inverted, and what the flag standard does and does not give you.
CHAPTER 15
Developer portals and measurement, with the evidence
What an internal platform reliably delivers, what it cannot yet evidence, and the research finding that reversed the most-quoted claim in the field.