* [Topics](/en/topics "Topics") * [DevOps](/en/topics/devops "DevOps") * What is a CI/CD pipeline? What is a CI/CD pipeline? ========================= Updated February 28, 2025•*3*-minute read Copy URL Jump to section --------------- What is a CI/CD pipeline?CI/CD pipelines and DevOpsWhat is Tekton?CI/CD pipelines and securityRed Hat OpenShift Pipelines What is a CI/CD pipeline? ------------------------- A continuous integration and continuous deployment ([CI/CD](/en/topics/devops/what-is-ci-cd "What is CI/CD?")) pipeline is a series of established steps that developers must follow in order to deliver a new version of software. CI/CD pipelines are a practice focused on improving software delivery throughout the software development life cycle via automation. By automating CI/CD throughout development, testing, production, and monitoring phases of the software development lifecycle, teams are able to develop higher quality code, faster and [more securely](/en/topics/security/what-is-cicd-security). Automated testing also allows dependencies and other issues to be identified earlier in the software development lifecycle, saving time later. Although it’s possible to manually execute each of the steps of a CI/CD pipeline, the true value of CI/CD pipelines is realized through automation. CI/CD pipelines have advantages for software organizations that use [virtual machines](/en/topics/virtualization/what-is-a-virtual-machine) as well as container-based [cloud-native applications](/en/topics/cloud-native-apps). With the ability to more quickly integrate updates and changes to code, teams can respond to user feedback and business changes frequently and effectively, leading to positive outcomes for end users. How do CI/CD pipelines relate to DevOps? ---------------------------------------- CI/CD pipelines, which streamline and accelerate software development, are a reflection of [DevOps](/en/topics/devops) methodology, a set of ideas and practices that fosters collaboration between developers and IT operations teams. The CI side of CI/CD refers to continuous integration, which includes building, testing, and merging code. The CD side can stand for continuous delivery, which includes automatically releasing software to a repository. CD can also stand for continuous deployment, which adds the step of automatically deploying software to production. A CI/CD pipeline guides the process of software development through a path of building, testing, and deploying code. By automating the processes that support CI/CD, development and operations teams can minimize human error and maintain a consistent process for how software is released. Pipelines can include tools for compiling code, unit tests, code analysis, security, and binaries creation. For containerized environments, pipelines will also include tools for packaging the code into a container image to be deployed across a hybrid cloud. Both CI/CD and DevOps focus on automating processes of code integration, thereby speeding up how an idea (like a new feature, a request for enhancement, or a bug fix) goes from development to deployment in a production environment where it can provide value to the user. Developers, usually coding in a standard development environment, work closely with IT operations to speed software builds, tests, and releases—without sacrificing reliability. The state of application modernization -------------------------------------- [Get the resource](/en/resources/app-modernization-report "Get the resource") What is Tekton? --------------- [Tekton](https://tekton.dev/) is a [Knative](/en/topics/microservices/what-is-knative)-based framework to create cloud-native CI/CD pipelines quickly. As a [Kubernetes](/en/topics/containers/what-is-kubernetes)-native framework, Tekton makes it easier to deploy across multiple [cloud](/en/topics/cloud-computing) providers or [hybrid environments](/en/topics/cloud-computing/what-is-hybrid-cloud). Tekton allows components to be reused across multiple pipelines, through the use of custom resource definitions (CRDs) in Kubernetes. Tekton uses the Kubernetes control plane to run pipeline tasks. By using standard industry specifications, Tekton will work well with existing CI/CD tools such as Knative and OpenShift. Using the Tekton project, you can build Kubernetes-style delivery pipelines that can control the complete life cycle of [microservices](/en/topics/microservices/what-are-microservices) without having to rely on central teams to maintain and manage a continuous integration server, plugins, and configuration. [Blog: Tekton vs. Jenkins: What's better for CI/CD pipelines?](/en/blog/tekton-vs-jenkins-whats-better-cicd-pipelines-red-hat-openshift) How can CI/CD pipelines support security? ----------------------------------------- Without proper security, a rapid development and deployment process can expose an organization to risks. Common risks can include revealing sensitive data to outside sources, incorporating insecure code or third party components, or exposing source code repositories or build tools to unauthorized access. Automated checks and testing within a CI/CD pipeline can safeguard code and prevent vulnerabilities in software delivery. Incorporating security into a pipeline helps to protect code from attack, prevent data leaks, comply with policies, and ensure quality assurance. Identifying and mitigating vulnerabilities throughout the development cycle assures that code changes are thoroughly tested and adhere to security standards before they are deployed to production. [Read more about CI/CD security](/en/topics/security/what-is-cicd-security) What is Red Hat OpenShift Pipelines? ------------------------------------ [Red Hat® OpenShift® Pipelines](/en/technologies/cloud-computing/openshift/pipelines) is a Kubernetes-native solution which builds on Tekton and provides tight integration with OpenShift and Red Hat developer tools. Administrators and developers can create pipeline blueprints for applications that are based on their organization’s unique business and security requirements. OpenShift Pipelines is designed to run each step of the pipeline in its own container, allowing each step to scale independently to meet the demands of the pipeline. OpenShift Pipelines is available with an OpenShift subscription and natively integrates with the OpenShift console, allowing developers to configure and execute pipelines directly alongside their applications. #### Red Hat OpenShift Pipelines features **Kubernetes-native pipelines** Use standard Tekton Custom Resource Definitions (CRDs) to define pipelines that run as containers and scale on demand. **Runs serverless** Get full control over your team’s delivery pipelines, plugins and access control with no central CI/CD server to manage. **Integrated CI/CD experience** Get a streamlined user experience through the Red Hat OpenShift console developer perspective, including the Pipeline Builder visual interface, as well as command-line interfaces and integrated development environments. [Explore the Red Hat OpenShift Pipelines documentation](https://docs.redhat.com/en/documentation/red_hat_openshift_pipelines/) Developer productivity with Red Hat technologies ------------------------------------------------ Find out how Red Hat technologies work together to support developer productivity. [Keep reading](/en/products/developer-productivity "Developer productivity with Red Hat technologies") Getting started with CI/CD pipeline security -------------------------------------------- Download to learn about each aspect of securing your CI/CD pipeline and the 9-step process for ensuring a strong security posture. [Read the report](/en/resources/ci-cd-pipeline-security-dzone-analyst-material "Getting started with CI/CD pipeline security") Keep reading ------------ ### What is blue green deployment? Blue green deployment is an application release model that gradually transfers user traffic from a previous version of an app or microservice to a nearly identical new release—both of which are running in production. [Read the article](/en/topics/devops/what-is-blue-green-deployment "article | what is blue green deployment") ### What is observability? Observability refers to the ability to monitor, measure, and understand a system or application by examining its outputs, logs, and performance metrics. [Read the article](/en/topics/devops/what-is-observability "article | what is observability") ### How to approach DevOps metrics DevOps metrics track the effectiveness of DevOps practices, which relate to software development and IT operations. [Read the article](/en/topics/devops/how-approach-devops-metrics "article | how to approach devops metrics") DevOps resources ---------------- ### Related content * Blog post [Meet the latest Red Hat OpenShift Superheroes](/en/blog/meet-latest-red-hat-openshift-superheroes-0) * Blog post [Precision over perception: Why architecture matters in benchmarking](/en/blog/precision-over-perception-why-architecture-matters-benchmarking) * Overview [Oil and gas giant achieves millions in savings with Red Hat](/en/resources/oil-and-gas-anon-overview) * Blog post [JBoss EAP XP 6.0: Achieving observability with OpenTelemetry](/en/blog/jboss-eap-xp-60-achieving-observability-opentelemetry) ### Related articles * [Red Hat OpenShift for developers](/en/technologies/cloud-computing/openshift/developers) * [What is blue green deployment?](/en/topics/devops/what-is-blue-green-deployment) * [What is observability?](/en/topics/devops/what-is-observability) * [How to approach DevOps metrics](/en/topics/devops/how-approach-devops-metrics) * [What is DevOps automation?](/en/topics/automation/what-is-devops-automation) * [What is CI/CD?](/en/topics/devops/what-is-ci-cd) * [What is application lifecycle management (ALM)?](/en/topics/devops/what-is-application-lifecycle-management-alm) * [What is DevOps?](/en/topics/devops/what-is-devops) * [What is GitOps?](/en/topics/devops/what-is-gitops) * [What is Istio?](/en/topics/microservices/what-is-istio) * [What is serverless?](/en/topics/cloud-native-apps/what-is-serverless) * [Stateful vs stateless applications](/en/topics/cloud-native-apps/stateful-vs-stateless) * [Platform engineering vs. DevOps](/en/topics/platform-engineering/platform-engineering-vs-devops) * [What is application migration?](/en/topics/cloud-native-apps/application-migration) * [What is application integration?](/en/topics/cloud-native-apps/application-integration) * [What is multi-cloud GitOps?](/en/topics/devops/what-is-multicloud-gitops) * [What is a GitOps workflow?](/en/topics/devops/what-is-gitops-workflow) * [What is Argo CD?](/en/topics/devops/what-is-argocd) * [Shift left vs. shift right](/en/topics/devops/shift-left-vs-shift-right) * [What is CI/CD security?](/en/topics/security/what-is-cicd-security) * [What is an internal developer platform?](/en/topics/platform-engineering/what-is-an-internal-developer-platform) * [Why choose Red Hat for a DevOps Platform?](/en/topics/devops/why-choose-red-hat-for-devops) * [What is DevSecOps?](/en/topics/devops/what-is-devsecops) * [What is an application development platform?](/en/topics/cloud-native-apps/what-app-dev-platform) * [Security in the software development lifecycle](/en/topics/security/software-development-lifecycle-security) * [What are cloud applications?](/en/topics/cloud-native-apps/what-are-cloud-applications) * [What is agile methodology?](/en/topics/devops/what-is-agile-methodology) * [Cloud-native CI/CD on Red Hat OpenShift](/en/technologies/cloud-computing/openshift/ci-cd) * [How to deploy Red Hat OpenShift](/en/technologies/cloud-computing/openshift/deploy-red-hat-openshift) * [Kubernetes-native Java development with Quarkus](/en/technologies/cloud-computing/openshift/quarkus) * [What is continuous delivery?](/en/topics/devops/what-is-continuous-delivery) * [What is deployment automation?](/en/topics/automation/what-is-deployment-automation) * [What is an SDK?](/en/topics/cloud-native-apps/what-is-SDK) * [What is SRE?](/en/topics/devops/what-is-sre) * [What is a Java runtime environment (JRE)?](/en/topics/cloud-native-apps/what-is-a-Java-runtime-environment) * [Why choose the Red Hat build of Quarkus?](/en/topics/cloud-native-apps/why-choose-red-hat-quarkus) * [What is an application architecture?](/en/topics/cloud-native-apps/what-is-an-application-architecture) * [What is Quarkus?](/en/topics/cloud-native-apps/what-is-quarkus) * [What are Java frameworks?](/en/topics/cloud-native-apps/what-is-a-Java-framework) * [What is an IDE?](/en/topics/platform-engineering/what-is-ide) [More about this topic](/en/topics/devops "More about this topic")