# Pipeline secrets: how not to end up with your keys on GitHubEN
Where the tokens and passwords a CI/CD pipeline needs should live: why a secret in the repository cannot be deleted, masking and protected branches, short-lived identities with OIDC.
Where the tokens and passwords a CI/CD pipeline needs should live: why a secret in the repository cannot be deleted, masking and protected branches, short-lived identities with OIDC.
What a CI/CD pipeline is, explained simply: continuous integration, continuous delivery, working examples with GitHub Actions and GitLab CI, and what is worth putting inside one.
In 2023 Terraform changed its license and the community created OpenTofu, an open source fork under the Linux Foundation. What it means, when to switch, and how to avoid lock-in.
pnpm can manage the Node.js version too: with devEngines the project declares the runtime it needs and pnpm downloads it, uses it and locks it in the lockfile - no nvm required. Tested examples and…
What Infrastructure as Code means: describing your infrastructure in versioned text files instead of configuring it by hand, the concrete benefits, the ideas of desired state and idempotency, and…