Blog

Deep-dives on infrastructure, platform security, and cloud engineering. (2 posts)

Built My Own Prometheus Service Discovery for Oracle Cloud Because a 3-Year-Old PR Never Got Merged

April 12, 2026

When the upstream OCI service discovery PR sat open for three years, I built the other end of the HTTP SD interface myself. This is running in production across 10+ OCI tenancies.

5 min

observabilityprometheusoracle-cloudgoinfrastructureopen-source

End-to-End Supply Chain Security for a Go Project: TUF on CI, cosign, and SLSA L3

April 11, 2026

How I wired together tuf-on-ci, Sigstore, SLSA L3 provenance, and GitHub Pages to build a fully verifiable release pipeline for oci-prometheus-sd-proxy with no long-lived signing keys anywhere.

12 min

securitysupply-chaintufsigstoreslsagoopenssf