DevSecOps automation patterns for enterprise-grade GitHub workflows. Battle-tested GitHub App configurations, secure content distribution, and policy enforcement at scale.https://adaptive-enforcement-lab.com/ https://github.com/adaptive-enforcement-lab/adaptive-enforcement-lab-comen Tue, 06 Oct 2026 06:11:14 -0000 Tue, 06 Oct 2026 06:11:14 -0000 1440 MkDocs RSS plugin - v1.19.0 None https://adaptive-enforcement-lab.com/ Mark Cheret automation ci-cd engineering Learn how to implement a 15-minute performance test in your CI/CD pipeline. Catch regressions early with automated, ephemeral production-scale environments. https://adaptive-enforcement-lab.com/blog/2026/09/13/the-15-minute-performance-test/ Sun, 13 Sep 2026 00:00:00 +0000 Adaptive Enforcement Labhttps://adaptive-enforcement-lab.com/blog/2026/09/13/the-15-minute-performance-test/#__commentshttps://adaptive-enforcement-lab.com/blog/2026/09/13/the-15-minute-performance-test/ Mark Cheret CI/CD DevOps Engineering A recent CI update cut 220 lines of debt to 50, standardizing our deployment tooling. It's the result of a year-long strategy for centralized CI/CD. https://adaptive-enforcement-lab.com/blog/2026/09/10/from-220-lines-of-debt-to-a-single-ci-template/ Thu, 10 Sep 2026 00:00:00 +0000 Adaptive Enforcement Labhttps://adaptive-enforcement-lab.com/blog/2026/09/10/from-220-lines-of-debt-to-a-single-ci-template/#__commentshttps://adaptive-enforcement-lab.com/blog/2026/09/10/from-220-lines-of-debt-to-a-single-ci-template/ Mark Cheret architecture data-engineering documentation A documentation block labeled "verified layout" for our data bus had drifted significantly, missing a critical namespace governed by an enforced contract. https://adaptive-enforcement-lab.com/blog/2026/09/04/the-verified-layout-that-wasnt/ Fri, 04 Sep 2026 00:00:00 +0000 Adaptive Enforcement Labhttps://adaptive-enforcement-lab.com/blog/2026/09/04/the-verified-layout-that-wasnt/#__commentshttps://adaptive-enforcement-lab.com/blog/2026/09/04/the-verified-layout-that-wasnt/ Mark Cheret automation engineering go Several automated dependency update pull requests, each conflicting. The path to a clean merge wasn't through them, but around them. https://adaptive-enforcement-lab.com/blog/2026/09/03/one-branch-to-rule-them-all/ Thu, 03 Sep 2026 00:00:00 +0000 Adaptive Enforcement Labhttps://adaptive-enforcement-lab.com/blog/2026/09/03/one-branch-to-rule-them-all/#__commentshttps://adaptive-enforcement-lab.com/blog/2026/09/03/one-branch-to-rule-them-all/ Mark Cheret devops gitops kubernetes One repo built for a single cluster grew into config for forty. Here's the week copy-paste caught up with us, and how we finally trusted what was running. https://adaptive-enforcement-lab.com/blog/2026/08/23/the-day-one-repo-became-forty/ Sun, 23 Aug 2026 00:00:00 +0000 Adaptive Enforcement Labhttps://adaptive-enforcement-lab.com/blog/2026/08/23/the-day-one-repo-became-forty/#__commentshttps://adaptive-enforcement-lab.com/blog/2026/08/23/the-day-one-repo-became-forty/ Mark Cheret CI/CD Compliance DevOps The Tuesday 10 AM release-review meeting was gone. In its place was a single, green checkmark in a pull request: `release-process-compliance: success`. https://adaptive-enforcement-lab.com/blog/2026/08/23/ci-job-replaced-release-committee/ Sun, 23 Aug 2026 00:00:00 +0000 Adaptive Enforcement Labhttps://adaptive-enforcement-lab.com/blog/2026/08/23/ci-job-replaced-release-committee/#__commentshttps://adaptive-enforcement-lab.com/blog/2026/08/23/ci-job-replaced-release-committee/ Mark Cheret Best Practices CI/CD Software Engineering IS_RELEASE_CANDIDATE=false shipped to production anyway. The string "false" evaluated as truthy. Here's how we stopped trusting booleans in CI. https://adaptive-enforcement-lab.com/blog/2026/08/14/the-boolean-that-lied/ Fri, 14 Aug 2026 00:00:00 +0000 Adaptive Enforcement Labhttps://adaptive-enforcement-lab.com/blog/2026/08/14/the-boolean-that-lied/#__commentshttps://adaptive-enforcement-lab.com/blog/2026/08/14/the-boolean-that-lied/ Mark Cheret automation compliance security Before our recent platform deployment, a near-miss with an unidentified component highlighted a critical gap in our manual compliance checks. https://adaptive-enforcement-lab.com/blog/2026/08/13/automating-trust-component-identity-release-audits/ Thu, 13 Aug 2026 00:00:00 +0000 Adaptive Enforcement Labhttps://adaptive-enforcement-lab.com/blog/2026/08/13/automating-trust-component-identity-release-audits/#__commentshttps://adaptive-enforcement-lab.com/blog/2026/08/13/automating-trust-component-identity-release-audits/ Mark Cheret Governance Infrastructure Operations An outage turned into a scavenger hunt for who owned a dead data store. That's when ownership and criticality labels stopped being optional. https://adaptive-enforcement-lab.com/blog/2026/08/12/untagged-outage/ Wed, 12 Aug 2026 00:00:00 +0000 Adaptive Enforcement Labhttps://adaptive-enforcement-lab.com/blog/2026/08/12/untagged-outage/#__commentshttps://adaptive-enforcement-lab.com/blog/2026/08/12/untagged-outage/ Mark Cheret Continuous Integration DevOps Pipeline Optimization I once watched a critical CI pipeline chew through resources for minutes, only to declare 'nothing to audit.' That's when I realized we needed a better gate. https://adaptive-enforcement-lab.com/blog/2026/08/11/speeding-up-ci-the-detect-job-pattern/ Tue, 11 Aug 2026 00:00:00 +0000 Adaptive Enforcement Labhttps://adaptive-enforcement-lab.com/blog/2026/08/11/speeding-up-ci-the-detect-job-pattern/#__commentshttps://adaptive-enforcement-lab.com/blog/2026/08/11/speeding-up-ci-the-detect-job-pattern/ Mark Cheret kubernetes operators rbac Our team struggled with complex RBAC rules for our integration testing operator. Manual YAML updates for every change were error-prone and slow. https://adaptive-enforcement-lab.com/blog/2026/08/10/operator-rbac-from-code-markers/ Mon, 10 Aug 2026 00:00:00 +0000 Adaptive Enforcement Labhttps://adaptive-enforcement-lab.com/blog/2026/08/10/operator-rbac-from-code-markers/#__commentshttps://adaptive-enforcement-lab.com/blog/2026/08/10/operator-rbac-from-code-markers/ Mark Cheret Automation Dependency Management DevOps A 70-PR dependency backlog forced us to automate Renovate triage with labels. Here's what changed. https://adaptive-enforcement-lab.com/blog/2026/08/10/the-monday-morning-pr-wall/ Mon, 10 Aug 2026 00:00:00 +0000 Adaptive Enforcement Labhttps://adaptive-enforcement-lab.com/blog/2026/08/10/the-monday-morning-pr-wall/#__commentshttps://adaptive-enforcement-lab.com/blog/2026/08/10/the-monday-morning-pr-wall/ Mark Cheret devops gitops kubernetes A failed midnight deploy taught us why GitOps beats scripted kubectl apply across a growing fleet of Kubernetes clusters. https://adaptive-enforcement-lab.com/blog/2026/08/09/the-cold-sweat-deploy/ Sun, 09 Aug 2026 00:00:00 +0000 Adaptive Enforcement Labhttps://adaptive-enforcement-lab.com/blog/2026/08/09/the-cold-sweat-deploy/#__commentshttps://adaptive-enforcement-lab.com/blog/2026/08/09/the-cold-sweat-deploy/ Mark Cheret AI Agents DevSecOps Developer Tools Documentation Writing documentation is an act of hope. Hope is not a delivery mechanism. So the docs learned to install themselves. https://adaptive-enforcement-lab.com/blog/2026/07/21/docs-nobody-read/ Tue, 21 Jul 2026 00:00:00 +0000 Adaptive Enforcement Labhttps://adaptive-enforcement-lab.com/blog/2026/07/21/docs-nobody-read/#__commentshttps://adaptive-enforcement-lab.com/blog/2026/07/21/docs-nobody-read/ Mark Cheret Culture DevOps Security When security stops being the bottleneck. The culture playbook that made security everyone's job (and nobody's blocker). https://adaptive-enforcement-lab.com/blog/2026/01/07/security-team-became-invisible/ Wed, 07 Jan 2026 00:00:00 +0000 Adaptive Enforcement Labhttps://adaptive-enforcement-lab.com/blog/2026/01/07/security-team-became-invisible/#__commentshttps://adaptive-enforcement-lab.com/blog/2026/01/07/security-team-became-invisible/ Mark Cheret Kubernetes Reliability Testing When chaos engineering finds the incident before production does. The pod deletion that validated our operational resilience. https://adaptive-enforcement-lab.com/blog/2026/01/06/chaos-proved-we-were-ready/ Tue, 06 Jan 2026 00:00:00 +0000 Adaptive Enforcement Labhttps://adaptive-enforcement-lab.com/blog/2026/01/06/chaos-proved-we-were-ready/#__commentshttps://adaptive-enforcement-lab.com/blog/2026/01/06/chaos-proved-we-were-ready/ Mark Cheret Cloud Security GCP Kubernetes When you delete the last JSON key file from production. The Workload Identity migration that eliminated credential leaks forever. https://adaptive-enforcement-lab.com/blog/2026/01/05/last-service-account-key/ Mon, 05 Jan 2026 00:00:00 +0000 Adaptive Enforcement Labhttps://adaptive-enforcement-lab.com/blog/2026/01/05/last-service-account-key/#__commentshttps://adaptive-enforcement-lab.com/blog/2026/01/05/last-service-account-key/ Mark Cheret Architecture Kubernetes Security When container escape meets defense in depth. The secure-by-design patterns that contained the breach before it started. https://adaptive-enforcement-lab.com/blog/2026/01/04/architecture-couldnt-be-breached/ Sun, 04 Jan 2026 00:00:00 +0000 Adaptive Enforcement Labhttps://adaptive-enforcement-lab.com/blog/2026/01/04/architecture-couldnt-be-breached/#__commentshttps://adaptive-enforcement-lab.com/blog/2026/01/04/architecture-couldnt-be-breached/ Mark Cheret DevOps Risk Management Security When CVSS 9.8 doesn't mean drop everything. The risk framework that taught engineers to think, not panic. https://adaptive-enforcement-lab.com/blog/2026/01/03/cve-that-didnt-matter/ Sat, 03 Jan 2026 00:00:00 +0000 Adaptive Enforcement Labhttps://adaptive-enforcement-lab.com/blog/2026/01/03/cve-that-didnt-matter/#__commentshttps://adaptive-enforcement-lab.com/blog/2026/01/03/cve-that-didnt-matter/ Mark Cheret Cloud Security GCP Kubernetes When penetration testers give up after 3 days. The GKE hardening guide that turned a cluster into a fortress. https://adaptive-enforcement-lab.com/blog/2026/01/02/gke-cluster-nobody-could-break/ Fri, 02 Jan 2026 00:00:00 +0000 Adaptive Enforcement Labhttps://adaptive-enforcement-lab.com/blog/2026/01/02/gke-cluster-nobody-could-break/#__commentshttps://adaptive-enforcement-lab.com/blog/2026/01/02/gke-cluster-nobody-could-break/