Tag: security
-
Terraform state: what it is and how to keep it safe
The state file is Terraform’s memory of your infrastructure, and it often contains secrets. Notes from my cloud-design project.
-
6 habits for smaller, safer Docker images
Multi-stage builds, non-root users, pinned base images and a few other habits that make containers lighter and harder to attack.
-
Stop using @v4: pin your GitHub Actions to a commit SHA
Tags can be moved, commit hashes can’t. One line in almost every workflow is a quiet supply-chain risk, and the fix takes a minute.