7 posts tagged DevSecOps.
In the weeks since Anthropic announced the Mythos Preview, my inbox has been filling up with the same vendor message in different logos. Each one points at Mythos and tells you everything has changed, you need to buy something, now.
Learn more →
A practical guide to separating developer concerns, CI, Continuous Delivery, and Deployment, how release manifests work as a master SBOM, and why domain-driven library design holds it all together.
Learn more →
In November 2025, attackers compromised popular npm packages. The attack didn't exploit a bug. It exploited trust. What happened, why traditional defences fall short, and what you can do.
Learn more →
When building a new security tool, we faced a problem. How do you convince security-conscious users to install software that requires system-level permissions?
Learn more →
Standard mode Logic Apps behave quite differently when deploying resources. It took much research to find a stable way to deploy workflows and, especially, workflow connections. Here is a walkthrough of the deployment steps.
Learn more →
Previously, we looked into deploying Azure resources uing infrastructure-as-code using Pulumi. In this post, I am walking you through creating the C# (or TypeScript etc) code from manual prototyping and proof-of-concept deployments in Azure to making them using Pulumi.
Learn more →
To handle Infrastructure-as-Code workflows, I use a product called Pulumi. It is built on top of the open-source platform Terraform. Pulumi handles versioning and recreation of cloud resources, handles state and shows a preview of what changes will occur.
Learn more →