📰 Dev.to · Stonebridge Tech Solutions LLC

A redacted engineering write-up: Cosign signing with KMS-backed keys, SLSA Level 3 provenance, OPA Gatekeeper admission on EKS, and an evidence stream that outl

A practitioner guide to running HIPAA-aligned pipelines on GitHub Actions: OIDC trust scope, self-hosted runner discipline, reusable workflows as the compliance

A practitioner's HIPAA CI/CD audit checklist: every Security Rule control mapped to a specific pipeline touchpoint, with the auditor's question and the fix.

Practitioner guide to HIPAA-compliant CI/CD: parent/child pipeline architecture, isolated runners, scanners as policy gates. With GCP and AWS code examples.

Five patterns I keep seeing in healthcare CI/CD pipelines that fail audits and slow teams down, plus what actually works instead.