Pipeline as code

Defining the delivery process in a versioned file alongside the code rather than in a server's user interface. It gives the pipeline review, history and branching — a change to the build can be tested on a branch before it affects everyone. The trade is that the pipeline definition is now attacker-reachable through a pull request, which is why what a fork's pipeline may do with credentials is a real security question.