Tutorials
Sign Container Images with Cosign in GitHub Actions
Learn how to sign container images with Cosign in GitHub Actions using keyless OIDC identity, then verify the signature before a Kubernetes deployment can proceed.
By Ilyas Rufai
Loading…
Technical Content Insights
Practical guides on APIs, infrastructure, developer documentation, and the systems behind better technical content.
Filtering by tag: Clear tag
Tutorials
Terraform Security Scanning in GitHub Actions
Add Terraform security scanning to GitHub Actions with Trivy, fail pull requests on high-risk misconfigurations, and keep approved infrastructure changes reviewable.
By Ilyas Rufai
Tutorials
Kubernetes ConfigMap vs Secret Explained
Learn when to use a Kubernetes ConfigMap vs Secret, why base64 is not encryption, and how to inject each into pods safely with env vars or volumes.
By Ilyas Rufai
Tutorials
Encoding RBAC as a JWT Integer Without Redis
Store role permissions as a single integer in your JWT payload. The permission check becomes one CPU instruction with no database call, no Redis lookup, and a token that is 72% smaller.
By Wale Bashir
Tutorials
Session Tokens vs JWTs: The False Dichotomy
Most auth tutorials force you to pick JWTs or sessions. Here is why that framing is wrong, and how the hybrid approach gives you the performance of JWTs with the revocation control of sessions.
By Wale Bashir
Developer Experience
Implementing Zero-Trust Architecture in SaaS: Beyond the VPN
Traditional VPNs are a liability in modern SaaS environments. Learn how to implement a Zero-Trust Architecture rooted in NIST SP 800-207.
