Case studies

Decisions before decoration

Structured technical work covering the problem, threat model, architecture, trade-offs, controls, validation, and limits.

Planned

Secure CI/CD Pipeline

A planned reference pipeline that turns source changes into scanned, traceable artifacts with explicit and explainable release gates.

  • GitHub Actions
  • Gitleaks
  • Trivy
  • CycloneDX
  • Sigstore
Planned

Policy-Enforced Infrastructure

A planned Kubernetes infrastructure lab combining broad IaC checks with narrowly defined organizational policy before deployment.

  • OpenTofu
  • Helm
  • Checkov
  • OPA
  • Rego
  • Kubernetes
Planned

Runtime Detection and Observability

A planned lab connecting Kubernetes runtime detections and audit evidence to searchable telemetry, actionable alerts, and a documented response.

  • Falco
  • Kubernetes
  • Prometheus
  • Grafana
  • Loki
  • Alertmanager