AUAmaan Ul Haq Siddiquiinamaanx86.hashnode.dev·May 23 · 7 min readDNS as Code: Managing Cloudflare Records with DNSControlEvery DNS change I have made through a dashboard felt wrong. Click the right zone, add the right record, hope you did not fat-finger the value. No diff. No review. No way to know what the zone looked 00
AUAmaan Ul Haq Siddiquiinamaanx86.hashnode.dev·Apr 28 · 10 min readBypassing Cloudflare for True Origin Health Checks with Blackbox Exporter and CoreDNSYou have 100+ web endpoints behind Cloudflare. You need to know if the origin is healthy. Not the edge. Not the CDN cache. The actual server behind it. Prometheus Blackbox Exporter is the standard ans00
AUAmaan Ul Haq Siddiquiinamaanx86.hashnode.dev·Apr 15 · 12 min readEnd-to-End Supply Chain Security for a Go Project: TUF on CI, cosign, and SLSA L3Adding cosign sign to a CI pipeline and calling it "signed releases" is a bit like putting a lock on a glass door. The lock works. The glass does not. Signing the image proves a specific digest was si00
AUAmaan Ul Haq Siddiquiinamaanx86.hashnode.dev·Apr 15 · 8 min readThe Git habits that made reviewers trust me before they read a single line of codeMost developers treat Git as a save button. Commit when something works. Push before you go to sleep. That's it. And honestly, it gets the job done — until you start sending PRs to projects with real 00