Platform engineering
Internal platforms, governance as code, dependency automation, and the conventions that replace configuration.
5 articles · tagged #platform #github #governance #renovate
Gatekeeper: one required check to rule them allWe deleted the pipeline checks from branch protection and merging got stricter. A convention-based PR gate for when your checks run outside GitHub, and the seven design decisions behind it.githubplatformgovernance· 2026-07-10 · 5 minRenovate at scale: what we run across 50+ reposThe preset architecture behind one opinionated Renovate configuration across 50+ repos: two composed presets, a 14-day soak window, provider grouping, and the tradeoffs.renovateterraform· 2026-05-29 · 8 minThe 14-day soak windowWhy we deliberately wait 14 days before adopting any new dependency version, how security advisories bypass the hold, and what the delay actually costs.renovategovernance· 2026-05-22 · 2 minAutomating GitHub repository management with TerraformOne JSON file lists the repositories. Terraform decides their settings, team permissions, and branch protection. Plus the honest part: what the provider cannot do and how we work around it.githubterraformgovernance· 2025-09-05 · 6 minAutomating GitHub team management with Terraform and Azure ADGitHub teams that mirror Azure AD groups, synced on a schedule by Terraform. Group discovery by prefix, nested-group filtering, and the email-to-username lookup problem nobody warns you about.githubterraformidentity· 2025-08-19 · 6 min