Feb 20 · 6 min read · Introduction If you've spent any time managing data pipelines in the real world, you know the pain of deploying changes manually — copy-pasting notebooks, praying nothing breaks in prod, and maintaini
Join discussion
Feb 14 · 4 min read · Designing Immutable Audit Trails for CI/CD in Hostile Environments Introduction: The Illusion of Observability Most security teams believe they have “logs.” In reality, most organizations have rumors of past events stored in databases that attackers...
Join discussionFeb 8 · 14 min read · Modern CI/CD pipelines are often treated as untouchable “trusted builds” – locked down by code review and best practices but that trust is a myth. A pipeline is a prime attack surface, containing ever
Join discussion
Feb 7 · 9 min read · A hands-on story of breaking things, learning, and automating a React app deployment to AWS I built a fully automated CI/CD pipeline that takes a React application from code commit to production deployment on AWS in under 10 minutes. Along the way, I...
Join discussionFeb 6 · 16 min read · Basic security terms for the course SAST, SCA, DAST, IAST SAST: Static Application Security Testing (Code review for your own code)-> white box testing SCA: Software Composition Analysis (Background check of external libraries you use) DAST: Dynam...
Join discussion
Feb 3 · 15 min read · From Stochastic Identity to Deterministic Intent: A Zero-Trust Architecture for Hostile Environments In December 2020, the SolarWinds Sunburst attack exposed a catastrophic flaw in how we think about CI/CD security. The attackers (APT29) didn't brea...
Join discussionFeb 2 · 4 min read · A hands-on DevSecOps project demonstrating security-first CI/CD with Jenkins, SonarQube, and Trivy Introduction DevSecOps is no longer optional in modern software development. Organizations expect security, code quality, and automation to be part of...
Join discussionFeb 1 · 4 min read · When I first built ReviewBuddy, it started as a simple GitHub Action written in Shell Script. At that time, the goal was straightforward:👉 get something working fast, validate the idea, and ship. And shell scripting did its job. But as ReviewBuddy s...
Join discussion
