GitHub

← Back to standards

Idea (developing)

GitHub is the audit trail for production. Every deploy to the production Fly org runs from Actions on main, with branch-named workflows and environment-scoped secrets—not from a developer laptop.

Topics we will cover

• Workflow naming: fly-deploy-staging.yml, fly-deploy-main.yml, fly-deploy-uat.yml (future)
• on.push.branches must match the branch the workflow deploys
• GitHub environments and org-scoped FLY_API_TOKEN per tier
• SOC 2: production Fly changes require a reviewable GitHub history
• Cardinal sin: flyctl deploy to the production org from a laptop
• Staging manual deploy during bootstrap vs production CI/CD-only
• Required checks, approvals, and exceptions (platform / tech lead review)

Content coming soon.