Open in app
Sign inGet started
How to Handle Secrets in Go

How to Handle Secrets in Go

Learn the best practices for handling secrets in Go in the cloud-native ecosystem.
Go to the profile of Tiexin Guo
Tiexin Guo
A Brief Introduction to Multicloud Security

A Brief Introduction to Multicloud Security

What multicloud is, challenges, security concerns, and best practices towards a secure multicloud architecture.
Go to the profile of Tiexin Guo
Tiexin Guo
Dependency Confusion Attacks and Prevention: Register Your Private Package Names

Dependency Confusion Attacks and Prevention: Register Your Private ...

Dependency confusion attacks exploit gaps in your software supply chain. Modern dependency management and best practices explained.
Go to the profile of Tiexin Guo
Tiexin Guo
Container Security Scanning: Vulnerabilities, Risks and Tooling

Container Security Scanning: Vulnerabilities, Risks and Tooling

Container vulnerabilities and container security scanning: tools, SCA, runtime security, and more.
Go to the profile of Tiexin Guo
Tiexin Guo
How to Handle Secrets in Jupyter Notebooks

How to Handle Secrets in Jupyter Notebooks

From entering passwords to using secret managers, this guide covers best practices for protecting sensitive info in your noteboooks.
Go to the profile of Tiexin Guo
Tiexin Guo
Open-Source Software Security

Open-Source Software Security

Learn about vulnerabilities, dependencies, and tools to improve open-source software security in this in-depth blog post.
Go to the profile of Tiexin Guo
Tiexin Guo
Pulumi V.S. Terraform: The Definitive Guide to Choosing Your IaC Tool

Pulumi V.S. Terraform: The Definitive Guide to Choosing Your IaC Tool

The definitive showdown between Pulumi and Terraform. Tips and FAQ included. Choose the right tool for the job.
Go to the profile of Tiexin Guo
Tiexin Guo
The New Frontier in Cybersecurity: Embracing Security as Code

The New Frontier in Cybersecurity: Embracing Security as Code

Unlock the power of secure SDLC with Security as Code. Embrace the future of cybersecurity now! Best practices included #SecurityAsCode
Go to the profile of Tiexin Guo
Tiexin Guo
10 New DevOps Tools to Watch in 2024

10 New DevOps Tools to Watch in 2024

Boost engineering productivity, cut down cost, enhance security — let’s cover 10 DevOps tools to watch and try for 2024. Get started now!
Go to the profile of Tiexin Guo
Tiexin Guo
How to Handle Secrets in Helm

How to Handle Secrets in Helm

Step-by-step guide and best practices to handle Helm chart secrets safely and effectively. Level up your Helm deploy today. Get started…
Go to the profile of Tiexin Guo
Tiexin Guo
Handling Secrets with AWS Secret Manager

Handling Secrets with AWS Secret Manager

This tutorial helps you better understand AWS Secrets Manager, how it works under the hood and how to access it from Kubernetes clusters.
Go to the profile of Tiexin Guo
Tiexin Guo
Handling Secrets with Google Cloud Secret Manager

Handling Secrets with Google Cloud Secret Manager

An insightful introduction to GCP’s Secret Manager and a tutorial on creating secrets and securing access within VMs and CI pipelines.
Go to the profile of Tiexin Guo
Tiexin Guo
Handling Secrets with Azure Key Vault

Handling Secrets with Azure Key Vault

This tutorial details how to manage secrets effectively using Azure Key Vault. You‘ll learn how to access secrets in VM and K8s/AKS.
Go to the profile of Tiexin Guo
Tiexin Guo
Securing your CI/CD by Removing Long-Lived Passwords: an OIDC Tutorial

Securing your CI/CD by Removing Long-Lived Passwords: an OIDC Tutorial

Securing CI/CD systems and offers three best practices; use OpenID Connect (OIDC) to employ short-lived tokens for improved CI security.
Go to the profile of Tiexin Guo
Tiexin Guo
Platform Engineering: Building Your Developer Portal with Backstage — Part 2

Platform Engineering: Building Your Developer Portal with Backstage...

Enhance your portal’s capabilities with plugins and unlock custom functionalities in the second part of our Backstage tour.
Go to the profile of Tiexin Guo
Tiexin Guo
Argo CD: a Revisit — Continuous Deployment with GitOps Automagically

Argo CD: a Revisit — Continuous Deployment with GitOps Automagically

An overview of CI/CD/GitOps/Argo CD, and some reasoning and stories behind them.
Go to the profile of Tiexin Guo
Tiexin Guo
Platform Engineering: Building Your Developer Portal with Backstage — Part 1

Platform Engineering: Building Your Developer Portal with Backstage...

Build a developer portal with Backstage. In this tutorial, learn how to create a secure-by-default software catalog for repo bootstrapping.
Go to the profile of Tiexin Guo
Tiexin Guo
Platform Engineering and Security: A Very Short Introduction

Platform Engineering and Security: A Very Short Introduction

Is DevOps really dead? Learn about the rise of platform engineering and how it differs from DevOps.
Go to the profile of Tiexin Guo
Tiexin Guo
Supply Chain Security: Secrets and Modern Security Frameworks (Part III)

Supply Chain Security: Secrets and Modern Security Frameworks (Part...

In this final part, we’ll discuss more software supply chain security frameworks and the critical role of secrets detection in them.
Go to the profile of Tiexin Guo
Tiexin Guo
AWS Cognito: Integrating Cognito with a Web App

AWS Cognito: Integrating Cognito with a Web App

In this article, we will do a quick intro to AWS Cognito, and see a real-world example of how to integrate your Web App with it.
Go to the profile of Tiexin Guo
Tiexin Guo
Building Your Developer Portal with Backstage: a Comprehensive Tutorial

Building Your Developer Portal with Backstage: a Comprehensive Tuto...

A complete guide from the ground up: using backstage to build YOUR developer portal.
Go to the profile of Tiexin Guo
Tiexin Guo
Supply Chain Security: Sigstore and Cosign (Part II)

Supply Chain Security: Sigstore and Cosign (Part II)

The ability to sign and verify the integrity and origin of software artifacts, such as Docker images, is critical to supply chain security.
Go to the profile of Tiexin Guo
Tiexin Guo
Backstage is not user-friendly. I want something better.

Backstage is not user-friendly. I want something better.

As you guys all already know, I’m a DevOps engineer, if that’s still a thing. Because apparently nowadays, “DevOps is dead; long live…
Go to the profile of Tiexin Guo
Tiexin Guo
DevOps with Python: Python “concurrent.futures” Concurrency Tutorial — A Real-World Example

DevOps with Python: Python “concurrent.futures” Concurrency Tutoria...

A tutorial of Python’s concurrent.features with an real-world DevOps issue.
Go to the profile of Tiexin Guo
Tiexin Guo
A Comprehensive Tutorial on Service Mesh, Istio, Envoy, Access Log, and Log Filtering

A Comprehensive Tutorial on Service Mesh, Istio, Envoy, Access Log,...

Learn how to install Istio locally, play with Envoy’s access log and log filters, and apply those changes in your Istio’s sidecar.
Go to the profile of Tiexin Guo
Tiexin Guo
About 4th CoffeeLatest StoriesArchiveAbout MediumTermsPrivacyTeams