Post

Gonna start actually posting to the @ersc.io blog for real soon What do you want to hear about?

for ‘enthusiast engineers’, there’s a lot of resentment towards github and “what if a vcs forge was good” is a pretty straightforward pitch. but to execs who actually buy software, github is comfortable and familiar, with lots of features and audit logs and permissions and stuff …

so i’d love to see ersc publish some material along the lines of “here’s why we think it’s worth it to rewrite all of your ci from github actions yaml and move all of your integrations over to our new platform”

Having a thumbs up from the security team doesn't hurt, either. B/c lord knows GitHub Actions isn't always getting that

in general, would a relatively short blog post about how we have fine-grained, zanzibar-style permissions, no-long lived secrets, and first-class service account/workload identity (i forget how people refer to each…) be of interest? (in addition to the standard audit logs, ofc)