SentinelOne flagged pam_exec.so on a CI/CD runner — under /var/lib/docker/overlay2. Tracing it from file to layer to image turned a scary alert into a lesson in how Docker actually stores things, and in provenance.
Installing a security agent on Kubernetes sounded like a one-liner. Deploying SentinelOne as a DaemonSet on GKE turned into a crash course in Helm, corporate proxies, internal registries, version pinning, CI/CD and platform engineering.
From React and React Native to data pipelines, GCP, GKE, GitLab CI/CD and platform engineering — what changed when I stopped looking only at the screen and started seeing the whole system behind it.
CodePush lets you ship over-the-air updates to React Native apps without the store review queue — but only if you respect its boundaries. Here are the four considerations that matter.