CI/CD · 8 min
Incremental Static Analysis
Making static analysis of a large C codebase fast enough for every merge request.
published [date] · v2.1.0
Ẹ kú àbọ̀.
Systems, Martial Arts
& Engineering
Complex problems rarely belong to one discipline, and that's where I like to work. This is my space to abstract ideas, innovate, and share what I learn.
Four ways in
Latest field notes
FILE 01 · ABSTRACTDevelopers name container images by tag, but a tag can be repointed without anyone noticing. Two pipelines: one signs and attests the image; the other, given only the tag, resolves, verifies and runs the exact digest. It worked.Field notes · supply chain security · 10 minReadable Tags, Verified DigestsDevelopers keep writing tags; the pipeline guarantees the image behind each one.Read the field notes →Series
Articles that build on each other, in order. Start at part one, or jump in anywhere.
Path · 3 partsSoftware supply chain securityProve where your artifacts came from, and that nobody changed them on the way.1 ● SLSA in Practice2 ● Pinning Images by Digest3 ○ Image scanning in CI · comingStart at part 1 →Path · 2 partsCI/CD and pipelinesPipelines that give fast, honest feedback, and where they're heading next.1 ● Incremental Static Analysis2 ○ Agentic CI/CD · draftStart at part 1 →KnowledgeReading, extractedWhat I'm reading, the ideas I pull out of each book, and how they connect.Books · the library by threadCompetitive Engineering · knowledge readingBrowse →
Latest articles
All articles →
Supply chain · 7 min
Pinning Images by Digest
Why tags drift, and how digest pinning keeps container builds reproducible.
published [date] · v1.0.0
Supply chain · 9 min
SLSA in Practice
What each SLSA level actually asks of a build pipeline, and where teams get stuck.
published [date] · v3.4.0 · evolving
Now
- writing
- Kasser, in the ring: field notes
- reading
- [Book title]
- building
- Invidious on GCP
Open threads
Full log →- Agentic CI/CD: research notesdraft
- Machine learning × MMA, refactoredin progress
- Homelab: Proxmox notesdraft