Kingsley Learning's CI pipeline in Cloud Build runs only a compile step before images are promoted by Cloud Deploy. Over the last quarter, 40 percent of production incidents were caused by logic bugs that unit tests would have caught, and three were caused by container images with critical known vulnerabilities. The VP of engineering wants quality gates that stop such releases automatically, with no manual review step added.
Which two actions should you take? Each correct answer presents part of the solution.
- AAdd unit and integration test steps to the Cloud Build configuration so that a failing test fails the build and no image is produced for promotionAutomated tests as blocking build steps stop logic regressions before an artifact exists, which is the earliest and cheapest quality gate.
- BFail the build when Artifact Analysis on-demand scanning reports critical vulnerabilities in the built imageScanning the image in the pipeline and failing on critical findings stops vulnerable images from being promoted, without manual review.
- CRequire a release manager to read every pull request before mergeManual review was explicitly ruled out and does not reliably catch logic bugs or vulnerable packages.
- DIncrease the production error budget so that incidents no longer exhaust itChanging the budget hides the quality problem rather than preventing defective releases.
- ERun the tests nightly against production after deploymentTests that run after deployment detect problems only once users are already affected.