// End-to-end InnerSourcing and Secure Development with GitHub

A double episode catching up on two weeks of Azure updates including AKS scale down modes, Cosmos DB Functions v4, and Azure Functions runtime 4.0 with .NET 6, plus GitHub CLI 2.0, Advanced Security secret scanning APIs, and a look at secretless application patterns with managed identities.

Once you have a working GitHub Actions workflow, the next challenge is safely deploying across dev, staging, and production with the right secrets in the right places. This episode deep-dives into GitHub Actions Environments: how to scope secrets per environment to enforce the principle of least privilege, configure required reviewers and wait timers as production gates, and assign service principals with minimal Azure RBAC permissions. A live demo deploys the cloudwithchris.com Hugo site to Azure Storage, making every concept concrete.

A live monthly roundup covering everything notable in Azure, GitHub, and Azure DevOps through February 2022. Key highlights include GitHub Actions support for OpenID Connect (OIDC) deployments to Azure Static Web Apps, GitHub Projects beta improvements (flexible iterations, insights filtering), and updates to GitHub Codespaces and the GitHub CLI. On the Azure side: Azure Monitor gains OpenTelemetry integration and improved observability tooling, Azure Payments HSM enters public preview, and Azure Arc cloud-to-edge observability is explored. Chris also shares Cloud With Chris updates including a new Hugo-powered presentations site hosted on Azure Static Web Apps, a feature flags episode, and community highlights from the UK Azure Community Day.