Skip to main content
Abdulmalik
AppSec Engineer
View all authors

Managing Secrets in Infrastructure As Code with Terraform

Okay, you've moved your infrastructure provisioning from visiting the console page and now adopted IaC ( Infrastructure as Code) for provisioning your infrastructure using Terraform.

So along the way, you discovered that you will need some sensitive credentials like GitHub token to use with aws amplify, datadog API and key deployments?

Signing Container Images for Trust Assurance

Hii ๐Ÿ‘‹, I am sure you want peace of mind too, haha

peace tweet

Well, there is no way you would be discussing container supply chain security without talking about the signing of container images.

Run github action locally using act

Yeah, being doing the CI/CD implementations via github workflow lately and I am also trapped in the process of making commits to trigger the workflows or better still making empty commits, haha.