CI/CD and pipelines
Incremental Static Analysis
Making static analysis of a large C codebase fast enough to run on every change.
published · v2.1.0 · evolving
/ articles
Articles
Technical write-ups from DevSecOps work, rewritten to be platform-agnostic, plus knowledge readings from the books I'm working through.
Engineering
Supply chain security
Pinning Images by Digest
Why tags drift, and how digest pinning keeps container builds reproducible.
published · v1.0.0 · stable
Supply chain security
SLSA in Practice
What each SLSA level actually asks of a build pipeline, and where teams get stuck.
published · v3.4.0 · evolving
Knowledge
Knowledge
Books
The library by thread: what I'm reading, have read, and plan to read. All books →
updated
Knowledge
Competitive Engineering
A knowledge reading: what I took from Gilb, and where it connects. All readings →
published · v1.0.0