Replace expiring client secrets in GitHub Actions with Workload Identity Federation. This walkthrough sets up an Entra ID App Registration, scoped federated credentials, and a clean azure/login step so your pipelines authenticate to Azure with short lived OIDC tokens.
DevOps
Configuring Claude Code with CLAUDE.md
A practical guide to configuring Claude Code with CLAUDE.md and AGENTS.md, covering file locations, what rules to include, how to organize rules for larger projects, and how to deploy organization-wide policy files.
Azure infrastructure with Bicep and GitHub Actions
Introduction ARM templates have long been the go-to for declarative Azure infrastructure, but their verbose JSON syntax makes them painful to read and maintain. Bicep is Microsoft's answer: a cleaner domain-specific language that compiles down to ARM JSON. Pair it...
AI Code Review on Every Pull Request
Every senior engineer has reviewed a pull request, spotted an obvious bug, and wondered why the submitter did not catch it themselves. Claude can be that first-pass reviewer — reading every PR automatically and leaving structured comments before a human even opens the...


