Setting Up a Production CI/CD Pipeline for a Python/Django App
Slack’s data platform eliminated 700+ SSH-based jobs by migrating to REST APIs. A Python plugin (hermes-ssh) enables SSH command execution in managed environments.
Key takeaways
- 1Slack migrated 700+ production data jobs from SSH to REST APIs to reduce attack surface and enable modernization
- 2GitHub's post-quantum SSH upgrades indicate a strategic shift toward future-proof cryptographic protocols
- 3The hermes-ssh plugin allows secure, tracked remote command execution in Python-based agent environments
- 4Render uses SSH keys to access private packages during deployment, showing continued practical use in CI/CD workflows
- 5Security concerns around direct SSH access to compute clusters are a primary driver for migration efforts
