Post

Gonna start actually posting to the @ersc.io blog for real soon What do you want to hear about?

for ‘enthusiast engineers’, there’s a lot of resentment towards github and “what if a vcs forge was good” is a pretty straightforward pitch. but to execs who actually buy software, github is comfortable and familiar, with lots of features and audit logs and permissions and stuff …

Yeah this is clutch. One thing we want to make sure we do is like, support those integrations, so you’re not actually losing out on stuff

Having a thumbs up from the security team doesn't hurt, either. B/c lord knows GitHub Actions isn't always getting that

in general, would a relatively short blog post about how we have fine-grained, zanzibar-style permissions, no-long lived secrets, and first-class service account/workload identity (i forget how people refer to each…) be of interest? (in addition to the standard audit logs, ofc)