How I Built a CI/CD Linter with Python, OPA, and Rego to Secure GitHub WorkflowsCI/CD is the backbone of modern software delivery — but too often, it's treated as an afterthought when it comes to validation and security. We lint our code.We test our deployments.But our GitHub Actions YAMLs? They're often pushed and merged with m...Jun 30, 2025 · 5 min readcaman.hashnode.dev
No More Secrets: How I Built a Zero-Trust CI/CD Pipeline with GitHub Actions, Vault, and SPIRELet’s be honest: most CI/CD pipelines today are still scary from a security perspective. I've seen access keys buried in YAML, secrets passed as plaintext env vars, and vault tokens that never expire. In an age of cloud-native infrastructure and Zero...Jun 17, 2025 · 4 min readcaman.hashnode.dev
From Confusion to Clarity: How Policy-as-Code Changed the Way I See DevOps GovernancePolicy-as-Code CI/CD Governance "Why is no one talking about policy enforcement in CI/CD pipelines like it's a core part of DevOps?"This was the question that started it all for me. I am C.Aman — a cloud and DevOps engineer who recently went deep in...Jun 5, 2025 · 4 min readcaman.hashnode.dev
