
Trust No Pipeline: Why Attackers Stopped Hacking Your Cluster and Started Riding Your CI/CD (And How to Stop Them on Google Cloud)
Sourced from: my talk "Trust No Pipeline: Securing Software Delivery & Workload Identity in the...

Author profile
Senior DevOps Lead, GDE on Cloud
Browse the latest writing surfaced through DevArt.

Sourced from: my talk "Trust No Pipeline: Securing Software Delivery & Workload Identity in the...

Resisting the Eye of the Machine: A Reflection on AI and Data Ownership ...

Resisting the Eye of the Machine: A Reflection on AI and Data Ownership ...

git·vodka's idea had been sitting in the back of my mind for a while. not as some big product idea....
![[Boost]](https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fhi7ilmkf9c5m4kpd1u73.png)
I hacked every dumb screen in my house into one dashboard ...

Sourced from: GKE Agent Sandbox docs, kubernetes-sigs/agent-sandbox So here is the thing. We...

This Kindle was supposed to be obsolete. The tiny LCD beside it was designed to do little more than...

AI both creates and consumes. For someone like me, who’s invested deeply in both the benefits and...

Building event-driven systems with Cloud Run, Pub/Sub, and Eventarc is a powerful pattern, but the...

This is a draft write-up from 2019, documenting a CAPTCHA bypass technique I discovered back then....

Or: How We Learned to Stop Worrying and Start Debugging at 2am I need to tell you about a report...

In my current role, I often need to analyze database records and evaluate user performance metrics to...
Advertisement