Philip Holleran

3 articles by Philip Holleran.

Demonstrating end-to-end traceability with pull requests

Reduce developer and auditor friction involved in demonstrating compliance and maintaining end-to-end traceability by focusing your efforts around the pull request.

Philip Holleran·July 11, 2023Engineering

GitHub Actions for security and compliance

GitHub Actions can automate several common security and compliance tasks, even if your CI/CD pipeline is managed by another tool.

Philip Holleran·October 22, 2021Security

Implementing least privilege for secrets in GitHub Actions

GitHub Actions provide a powerful, extensible way to automate software development workflows. When access to outside resources is required, GitHub provides the ability to store encrypted secrets used by GitHub…

Philip Holleran·April 13, 2021Security