CI/CD/DevOps

trying CodeFresh for the 1st time

CodeFresh now provides an SaaS option, so I revisited it recently.

End to end demo flow between GH action / GHCR and ArgoCD

a simple experiment to test out Redis as a cache to Postgres in docker-compose

ref:

https://sevic.dev/notes/postgres-redis-docker-compose/
https://learn.arm.com/learning-paths/servers-and-cloud-computing/redis_cache/redis_psql_aws/

End to end workflow to build, sign, and deploy a distroless image using apko/cosign/kyverno

keyless image signing with Cosign and validation with Kyverno

keyless image signing with Sigstore (Cosign/Rekor/GH action/GHCR)

debugging Chainguard distroless containers

Chainguard images are lightweight, distroless images with minimum footprint, reduced attack surface and much less known vulnerabilities; so it serves as good starting point as a base image. Further, they provide both the dev and prod version of the most…

notes on ChatGPT Prompt Engineering for Developers (1)