Avatar
I help teams build resilient systems in the cloud. Day-to-day I'm in the Terraform and Go trenches, maintaining Infrastructure-as-Code, authoring cybersecurity tools, and contributing to MITRE, OWASP, Debian, Terraform Best Practices, and Terraform Proverbs.

git log

Building an AWS Image Factory with Packer and Terratest
Welcome to Transitive Dependency Hell
SHA Pinning Is Not Enough
How a Typosquatted Domain and a Fake Version Tag Turned Trivy Into a Credential Stealer
Terraform Drift Detection Powered by GitHub Actions