Terraform Module Lifecycle: From First Variable to a Release Teams Can Trust
Terraform module lifecycle for platform teams: design, test, review, release, consume and deprecate modules on Azure so every version is one teams can trust.
GitHub
Terraform Module Testing as Governance: The Part That Actually Enforces the Rules
Over the last few weeks this series has built up a fair set of rules. Module boundaries decide what each module is responsible for. Calling conventions decide how those modules get pinned, what goes in and what comes out. Pinned sources, typed inputs, validated variables, outputs treated as a contract, providers passed down rather than … Read more
Terraform Calling Conventions: How Your Modules Should Actually Talk to Each Other
Terraform module source, pinning, inputs and outputs: the calling conventions that let platform teams change modules on Azure without breaking every consumer.
Shadow AI: How to Spot AI Code in Your Estate
Shadow AI means Claude Code, Lovable and unsanctioned tools entering your estate unseen. Here’s what platform teams can actually detect.
What Your Pipeline Can Actually Catch: Building the AI Code Scanning Layer
AI tools generate code fast. Your pipeline needs to catch what they get wrong. Here’s how to build a scanning layer across IaC, containers, and application code.
Azure DevOps vs GitHub Actions: A Practitioner’s Guide
Azure DevOps vs GitHub Actions: a practitioner comparison covering pipelines, templates, federated identity, GitHub Copilot, and when a hybrid approach makes sense
GitHub Actions and Terraform on Azure: A Production Pipeline
Learn how to build a production-grade Terraform pipeline on GitHub Actions with OIDC authentication, self-hosted runners, composite actions, gated approvals, and drift detection on Azure.
Custom GitHub Actions for Platform Engineers
Learn how to build composite GitHub Actions that standardise deployments across teams. A practical guide for platform engineers, with a real Azure OIDC login action walkthrough.
Self-Hosted GitHub Actions Runners on Azure
GitHub-hosted runners can’t reach private Azure resources. Learn how to deploy self-hosted runners on Azure as a shared platform across your landing zones.