Homepage
Open in app
Sign inGet started

4th Coffee

DevOps Chat

15 Months of Expense Tracking: 10 Things I Learned (And You Don’t Have to Track to Find Out)

15 Months of Expense Tracking: 10 Things I Learned (And You Don’t Have to Track to Find Out)

Mindful spending explored: It’s not about what you buy, but why.
Go to the profile of Tiexin Guo
Tiexin Guo
Mar 30
Managing GitLab Secrets in CI/CD Pipelines with Infisical

Managing GitLab Secrets in CI/CD Pipelines with Infisical

Best practices in managing GitLab Secrets in CI/CD Pipelines, and a new kid on the secret manager block: infisical.
Go to the profile of Tiexin Guo
Tiexin Guo
Mar 24
How to Handle Secrets in CI/CD Pipelines

How to Handle Secrets in CI/CD Pipelines

Securely managing secrets within the CI/CD environment is super important, and here’s how.
Go to the profile of Tiexin Guo
Tiexin Guo
Jan 29
Authentication and Authorization Best Practices

Authentication and Authorization Best Practices

Authentication and authorization are crucial aspects of security, and they also impact scalability and user experience.
Go to the profile of Tiexin Guo
Tiexin Guo
Jan 29
How to Handle Secrets in Go

How to Handle Secrets in Go

Learn the best practices for handling secrets in Go in the cloud-native ecosystem.
Go to the profile of Tiexin Guo
Tiexin Guo
Sep 19, 2024
A Brief Introduction to Multicloud Security

A Brief Introduction to Multicloud Security

What multicloud is, challenges, security concerns, and best practices towards a secure multicloud architecture.
Go to the profile of Tiexin Guo
Tiexin Guo
Sep 3, 2024
Dependency Confusion Attacks and Prevention: Register Your Private Package Names

Dependency Confusion Attacks and Prevention: Register Your Private ...

Dependency confusion attacks exploit gaps in your software supply chain. Modern dependency management and best practices explained.
Go to the profile of Tiexin Guo
Tiexin Guo
Aug 25, 2024
Container Security Scanning: Vulnerabilities, Risks and Tooling

Container Security Scanning: Vulnerabilities, Risks and Tooling

Container vulnerabilities and container security scanning: tools, SCA, runtime security, and more.
Go to the profile of Tiexin Guo
Tiexin Guo
Jul 25, 2024
How to Handle Secrets in Jupyter Notebooks

How to Handle Secrets in Jupyter Notebooks

From entering passwords to using secret managers, this guide covers best practices for protecting sensitive info in your noteboooks.
Go to the profile of Tiexin Guo
Tiexin Guo
Jun 10, 2024
Open-Source Software Security

Open-Source Software Security

Learn about vulnerabilities, dependencies, and tools to improve open-source software security in this in-depth blog post.
Go to the profile of Tiexin Guo
Tiexin Guo
May 13, 2024
Pulumi V.S. Terraform: The Definitive Guide to Choosing Your IaC Tool

Pulumi V.S. Terraform: The Definitive Guide to Choosing Your IaC Tool

The definitive showdown between Pulumi and Terraform. Tips and FAQ included. Choose the right tool for the job.
Go to the profile of Tiexin Guo
Tiexin Guo
Feb 5, 2024
The New Frontier in Cybersecurity: Embracing Security as Code

The New Frontier in Cybersecurity: Embracing Security as Code

Unlock the power of secure SDLC with Security as Code. Embrace the future of cybersecurity now! Best practices included #SecurityAsCode
Go to the profile of Tiexin Guo
Tiexin Guo
Dec 26, 2023
10 New DevOps Tools to Watch in 2024

10 New DevOps Tools to Watch in 2024

Boost engineering productivity, cut down cost, enhance security — let’s cover 10 DevOps tools to watch and try for 2024. Get started now!
Go to the profile of Tiexin Guo
Tiexin Guo
Nov 4, 2023
How to Handle Secrets in Helm

How to Handle Secrets in Helm

Step-by-step guide and best practices to handle Helm chart secrets safely and effectively. Level up your Helm deploy today. Get started…
Go to the profile of Tiexin Guo
Tiexin Guo
Oct 25, 2023
Handling Secrets with AWS Secret Manager

Handling Secrets with AWS Secret Manager

This tutorial helps you better understand AWS Secrets Manager, how it works under the hood and how to access it from Kubernetes clusters.
Go to the profile of Tiexin Guo
Tiexin Guo
Sep 10, 2023
Handling Secrets with Google Cloud Secret Manager

Handling Secrets with Google Cloud Secret Manager

An insightful introduction to GCP’s Secret Manager and a tutorial on creating secrets and securing access within VMs and CI pipelines.
Go to the profile of Tiexin Guo
Tiexin Guo
Aug 29, 2023
Handling Secrets with Azure Key Vault

Handling Secrets with Azure Key Vault

This tutorial details how to manage secrets effectively using Azure Key Vault. You‘ll learn how to access secrets in VM and K8s/AKS.
Go to the profile of Tiexin Guo
Tiexin Guo
Aug 18, 2023
Securing your CI/CD by Removing Long-Lived Passwords: an OIDC Tutorial

Securing your CI/CD by Removing Long-Lived Passwords: an OIDC Tutorial

Securing CI/CD systems and offers three best practices; use OpenID Connect (OIDC) to employ short-lived tokens for improved CI security.
Go to the profile of Tiexin Guo
Tiexin Guo
Aug 9, 2023
Platform Engineering: Building Your Developer Portal with Backstage — Part 2

Platform Engineering: Building Your Developer Portal with Backstage...

Enhance your portal’s capabilities with plugins and unlock custom functionalities in the second part of our Backstage tour.
Go to the profile of Tiexin Guo
Tiexin Guo
Jul 12, 2023
Argo CD: a Revisit — Continuous Deployment with GitOps Automagically

Argo CD: a Revisit — Continuous Deployment with GitOps Automagically

An overview of CI/CD/GitOps/Argo CD, and some reasoning and stories behind them.
Go to the profile of Tiexin Guo
Tiexin Guo
Jul 3, 2023
Platform Engineering: Building Your Developer Portal with Backstage — Part 1

Platform Engineering: Building Your Developer Portal with Backstage...

Build a developer portal with Backstage. In this tutorial, learn how to create a secure-by-default software catalog for repo bootstrapping.
Go to the profile of Tiexin Guo
Tiexin Guo
Jul 1, 2023
Platform Engineering and Security: A Very Short Introduction

Platform Engineering and Security: A Very Short Introduction

Is DevOps really dead? Learn about the rise of platform engineering and how it differs from DevOps.
Go to the profile of Tiexin Guo
Tiexin Guo
May 29, 2023
Supply Chain Security: Secrets and Modern Security Frameworks (Part III)

Supply Chain Security: Secrets and Modern Security Frameworks (Part...

In this final part, we’ll discuss more software supply chain security frameworks and the critical role of secrets detection in them.
Go to the profile of Tiexin Guo
Tiexin Guo
Apr 23, 2023
AWS Cognito: Integrating Cognito with a Web App

AWS Cognito: Integrating Cognito with a Web App

In this article, we will do a quick intro to AWS Cognito, and see a real-world example of how to integrate your Web App with it.
Go to the profile of Tiexin Guo
Tiexin Guo
Mar 22, 2023
Building Your Developer Portal with Backstage: a Comprehensive Tutorial

Building Your Developer Portal with Backstage: a Comprehensive Tuto...

A complete guide from the ground up: using backstage to build YOUR developer portal.
Go to the profile of Tiexin Guo
Tiexin Guo
Mar 7, 2023
About 4th CoffeeLatest StoriesArchiveAbout MediumTermsPrivacyTeams