Ci/Cd on Daniel Ancuta

GitHub Actions: Security Hardening With OpenID Connect

Thu, 06 Mar 2025 00:00:00 +0000

The easiest way to configure your CI/CD pipeline with AWS is to just create long-lived credentials, access and secret key, and store them in GitHub Actions.

While this method works, it has several security risks:

Secrets Management in AWS: Using Secrets Manager

Sat, 01 Mar 2025 00:00:00 +0000

Sharing secrets across microservices creates security risks. Not only when one of the microservices is compromised, as then during rotation of single secret all of your microservices will be affected. Leading to potential downtimes.

Debugging GitHub Actions Remotely

Mon, 01 May 2023 00:00:00 +0000

If you use GitHub to store your repositories, you may also be utilizing GitHub Actions. I’ve been using it for several years across multiple projects. There have been a few instances where I had to debug a failing workflow.