· 14 min
Keyless CI/CD: Workload Identity Federation for GitHub Actions
Swap service account keys in GitHub secrets for short-lived OIDC tokens, lock the trust to your own repo, and deploy to Cloud Run with no JSON key.
GCP, IAM & Security
14 min
Writing · 13 articles
Long-form notes on designing, securing and running production systems, mostly on Google Cloud. Every article is written from a real decision, with the trade-offs and the numbers behind it. Filter by topic, or start with the newest.
· 14 min
Swap service account keys in GitHub secrets for short-lived OIDC tokens, lock the trust to your own repo, and deploy to Cloud Run with no JSON key.
14 min