// Git

This episode dives deep into GitHub Advanced Security's new standalone Secret Protection and Code Security products. Chris demos secret scanning, push protection, custom patterns, and the free secret risk assessment report, then shows off a GitHub-themed brick breaker game powered by real contribution graph data.

The gap between raw Kubernetes and a developer-friendly platform is where the most interesting tooling is being built today. GitOps gives teams a declarative, version-controlled way to manage their clusters — but the YAML expertise and infrastructure knowledge required can be a steep barrier for developers. In this episode, Chris is joined by Laszlo Folgas, founder of Gimlet.io, to explore ClickOps over GitOps: a UI-driven deployment approach where developers click their way to production while the platform silently generates GitOps manifests and commits them to a Git repository. They cover Flux CD, how Gimlet's opinionated platform works end-to-end, and why developer experience has become the defining battleground in the cloud-native ecosystem.

Chris Nesbitt-Smith traces how governance policies are typically born — emotionally, reactively, and as one-shot documents — then shows how applying software engineering principles transforms policy into a living, versioned artefact. The talk covers iterative policy management, Kubernetes admission control, open-source policy tooling, and the cultural shift required to make policy genuinely effective rather than just technically compliant.

Chris Reddington is joined by Thomas Thornton — DevOps specialist at Kainos — for a practical deep dive into real-world DevOps. They cover CI/CD pipeline design, Git branching strategies (including trunk-based development), pull request workflows, Infrastructure as Code with Terraform, Kubernetes, and GitOps. Thomas draws on experience managing 83 Azure subscriptions and 120+ GitOps-driven applications in production.

Continuous Integration (CI) is a DevOps practice where engineers frequently merge small code changes into a central repository, triggering automated builds and test suites to catch regressions early. This video explains how CI applies equally to application code, Infrastructure as Code, database schemas, and data science notebooks, and shows how GitHub Actions and Azure Pipelines act as automated gatekeepers through pull request workflows.

Karl Cooke (irishtechie.com) interviews Chris Reddington about the full architecture and GitHub workflow powering CloudWithChris.com. The session covers Azure Storage static website hosting, Azure CDN with a custom rules engine for enforcing HTTPS and security headers (CSP, HSTS, Permissions Policy), Hugo as the static site generator, multi-environment GitHub Actions pipelines (preview, staging, production), GitHub Codespaces for in-browser editing, and practical security hardening using securityheaders.com and Mozilla Observatory.

In this Easter Sunday livestream, Chris covers Microsoft's Forrester Wave leader recognition for Azure Functions (FaaS), a wave of AKS updates including the new run command feature and Open Service Mesh add-on, and the GitHub Advanced Security security overview beta plus GA of secret scanning for private repositories. Delivery Plans 2.0 in Azure DevOps approaches GA with card styling and dependency visualisation, while GitHub Desktop gains cherry-pick support and GitHub Mobile adds working-hours notification controls. Cloud with Chris highlights include a beginner Git 101 Cloud Drop, a community blogging panel, the External Configuration and Claim Check architecture pattern episode with Peter Piper, and a preview of the upcoming Northern Azure User Group talk alongside Scott Hanselman.

I've recently released a few Cloud Drops episodes on Git related content. The Git Behind the Scenes video was incredibly well received. I'm also aware from my day-to-day discussions that there's a mix of experiences with Git, so also made a Git 101 Video. In this Cloud World that we live in, version control is an important concept beyond the 'traditional' developers. Infrastructure Engineers can now version control their Infrastructure as Code, or maintenance scripts. Data Scientists can version control their experiments and tests. And of course, developers can version control the code for their software. I also consider version control as a gateway or first step into the world of DevOps. Typically when you think about build and release pipelines, you are triggering based upon some version control event (e.g. a commit to a particular branch, a merge of a pull request, etc.). Over the past few years, I've seen a trend where organisations are looking to automate quickly, rather than relying on the traditional hands-on-keyboard approach which can be error-prone and time consuming. Whether we're talking in this context about Infrastructure as Code, Application Code, database schemas as code, data science experiments or any other representation as code, it doesn't matter. Typically the roads lead back to the same place, to version control. So in this blog post, I'll be covering the fundamentals of Git and how to get started. For anyone that is particularly inclined, there will also be some information on what's happening behind the scenes when you work through these fundamental concepts.

Git is a distributed version control system where every developer holds a complete copy of the repository and its history locally, enabling offline work and fast branching. This Cloud Drop covers git init, git add, git commit, git status, git log, git push, git pull, and git clone, plus VS Code's built-in Git integration and the Git Credential Manager for authenticating against GitHub and other remote hosts.

Weekly Vlog #13 covers an action-packed Azure week: enterprise landing zones with modular designs, zonal disaster recovery via Azure Site Recovery, Security Center compliance enhancements, and Mark Russinovich's standout Ignite session on Azure innovation. The GitHub roundup highlights the GitHub Actions capture-the-flag security writeup and a multi-stage exploit chain from the GitHub Security Lab — essential reading for any DevSecOps practitioner. Cloud with Chris updates include the channel's most-viewed video to date on Git internals, a Fuse.js-powered site search, series navigation, and a packed April talk schedule featuring the Northern Azure User Group (alongside Scott Hanselman) and Global Azure Bootcamp.