All articles tagged with Automation
Trivy exits 0 even with CRITICAL findings. I built it from source and made it a real CI gate, then found a secret-scan skip that a green result can hide.
Official Supabase Docker stack on a clean Ubuntu sandbox: the pooler and Edge Functions crash-looped. Why, and a compose override that fixed both, with tests.
Building Prometheus from source on a host with older Go and Node than the repo asks for: what the build does, what warns, and how I verified the result.
Dokku's nginx templates listen on [::] by default. Here is why nginx refuses to start on a host without IPv6, and how to fix it, including notes for…
A reference for lowering a cloud bill: measure first, right-size, use Spot for interruptible work, schedule capacity, compare regions, and track egress.
How to replace hand-run kubectl apply with a pull-based GitOps flow: Argo CD, Kustomize overlays, Sealed Secrets and a CI job that only edits an image tag.
Enforce CIS network sysctl baselines with Ansible, gate deployments on OpenSCAP results, and reject Ingress objects without TLS using an OPA admission policy.