How to use pipelines as security enforcement points — implementing policy-as-code, tuning gates, and making security a guardrail instead of a bottleneck.
Pipeline Your Way to Safety There's a version of security that looks like this: a team of security engineers sitting downstream of development, reviewing things after they've been built, filing ticket...
How security fits into the platform engineering movement — and why platform engineering done right makes secure defaults the path of least resistance.
Platform Engineering Is Security's Best Friend (If You Do It Right) Here's a frustrating truth about enterprise security: most of the vulnerabilities I see in production aren't there because developer...
Why code reviews are the most underrated learning tool in software engineering — and how to actually do them well.
Code Reviews - The Road to Learning Here's an unpopular opinion: the code review is the single most valuable learning tool available to a working software engineer, and most teams treat it like a rubb...
Testing enhanced code block functionality
Testing Enhanced Code Blocks Here are some examples of code blocks with different languages to test our new copy functionality: Go Code Example JavaScript Example Bash Commands Python Example Inl...
Secure your infrastructure from code to cloud with battle-tested Terraform patterns
Terraform Security Best Practices: Infrastructure as Code Done Right After managing Terraform deployments across hundreds of cloud environments, I've learned that Infrastructure as Code security isn't...