DevSecOps
Research and engineering notes on pipeline trust boundaries, infrastructure policy, secrets, artifact evidence, and multi-tenant findings systems.
- Secure CI/CD pipeline design
- Infrastructure as code and policy as code
- Supply-chain evidence, SBOMs, and signing
- Secrets management
- SecureObs multi-tenant security scanner