Is it normal practice to deploy to production from VCS (version control system)?

Question

ruby

I want to hear the opinion of experienced specialists on this issue
"Is it a normal practice to deploy to production from VCS (version control system)?"
Why did the question arise? There are a lot of examples on the Internet of how you can organize a deployment to production. And all these examples are divided into 2 main areas:
1. Deploy via VCS - i.e. we fill in the repository, on sale we merge from the repository.
2. Deploy from dev (uat) server via SSH using various automation utilities. Those. in this case, the prod does not know anything about any repositories.
I'm kind of leaning towards the first option (via VCS) - it's very convenient (already used). But if there are any problems (cons) of this method? Maybe some security issues?

Answer 1

The best option is to deploy from a Continuous Integration server. But, in the absence of such, most often they deploy from the VCS, the main security problem is the storage of configs and keys in the VCS.

Answer 2

Unfortunately, I will not give a specific answer to your question, but I will only advise you to look in this direction.