DevSecOps

Lessons from the field. Always landing on my feet.

All Cloud Security Identity Security Microsoft Sentinel Microsoft Defender AI Security Detection Engineering Threat Detection Container Security Entra ID Zero Trust DevSecOps Infrastructure as Code Agentic AI 3 posts
Jerrad Dahlager
Jerrad Dahlager, CISSP, CCSP Cloud Security Architect · Adjunct Instructor
About me →
Cloud Security

AKS Runtime Security: Binary Drift, Anti-Malware & Gated Deployment with Defender for Cloud

Review update (September 25, 2026): The merged September 25 source resolves and records an exact regional GA Kubernetes patch on first deployment and refuses implicit version changes on owned reruns. Pricing restoration is bound to the captured …

23 min read Read more →
DevSecOps

Secure Your Container Supply Chain: SBOM, Signing & Attestation with GitHub Actions

Review update (September 25, 2026): The merged-source publication verified the current image signature, SPDX SBOM and SLSA provenance at 2026-09-26 03:31:15 UTC (September 25 in America/Chicago). The digest is …

10 min read Read more →
Infrastructure as Code

Terraform 1.11 Write-Only Arguments: Keep Supported Secrets Out of State

Review update (September 25, 2026): The reviewed provider pins are historical evidence, not an evergreen supported toolchain. Before a new deployment, review Key Vault API retirement and AzureRM major-version migration notes. Keep state protections …

10 min read Read more →