Avatar
I help teams build resilient systems in the cloud. Day-to-day I'm in the Terraform and Go trenches, maintaining Infrastructure-as-Code, authoring cybersecurity tools, and contributing to MITRE, OWASP, Debian, Terraform Best Practices, and Terraform Proverbs.

git log

Welcome to Transitive Dependency Hell
SHA Pinning Is Not Enough
How a Typosquatted Domain and a Fake Version Tag Turned Trivy Into a Credential Stealer
Terraform Drift Detection Powered by GitHub Actions
Terraform Tips from the IaC Trenches