ci-cd
2 posts · all writing
Shift left became run everything on every commit
What got built was twelve scanners on every push, eleven minutes, and a pipeline people bypass. The useful version is about latency, not location.
Describe your app, not your scanners
Teams wire up scanners instead of describing software, and it breaks at scale. One declarative descriptor covers Trivy, Semgrep and Gitleaks at once.