Published onJuly 15, 2026Shipping Software Updates Into an Air-Gapped Environmentair-gappedenterprise-deploymentsupply-chaindevsecopskubernetesIn a regulated or air-gapped deployment your CI/CD pipeline stops at the customer's firewall. Here is how you actually get a signed, verifiable update to a box you cannot reach, and keep it patchable for years.
Published onJuly 6, 2026Terraform Module Design That Survives Three Years of Driftterraformiacdevsecopsplatform-engineeringHow to build Terraform modules that stay maintainable across three years of provider upgrades, refactors, and config drift.
Published onJune 25, 2026Secrets Management at Scale: Killing Long-Lived AWS Credentials with OIDC and VaultsecurityvaultawsdevsecopsoidcHow we eliminated static cloud credentials across CI, EKS, and developer laptops using OIDC federation and dynamic Vault secrets.