My Personal Blog Stack: Astro + GitHub Pages = Zero Excuses Not to Write
How I set up my personal blog and portfolio using Astro and GitHub Pages — zero cost, full control, and a git push away from publishing.
#github-actions
Rebuilding for Compliance, Part 4: From Signed Image to Verified Pipeline
Wiring a signed Wolfi toolchain image into a real consumer pipeline, verifying it at deploy time with Sigstore policy-controller, and digest-pinning with Renovate — the series finale.
Rebuilding for Compliance, Part 3: Building Secure Containers on Wolfi
Part 3 — how I put Wolfi, syft, grype, and cosign to work in hagzag/tools: a CI toolchain image with SBOM validation, keyless signing, and a single-command local loop.