DevOps · 9 min
Policy as code that security and platform teams both keep
OPA and Kyverno only work when the exception path is a pull request with an expiry. Otherwise you have a wiki with YAML.
Read →Topic
DevOps
How security lands in the delivery path: gated pipelines, signed artifacts, policy-as-code that platform teams will keep, and the operational glue between Git and production.
DevOps · 7 min
Secret scanning that does not train people to ignore alerts
Pre-commit, the git host, and runtime detection are three different jobs. Mixing them is how every finding becomes a medium.
Read →