Trend Micro rated this blog a Disease Vector — reclassifying the URL fixed it
Trend Micro's Site Safety Center rated this blog's service worker a Disease Vector. Cross-checking five other services and reclassifying the exact URL fixed it.
Security
A GitHub Action that patches the pnpm advisories Dependabot cannot — and the authentication approach decided the solution
Dependabot cannot update transitive dependencies on pnpm. Building the GitHub Action that patches them, and why its credential decided the design.
A GitHub Actions job that mints its own Cognito M2M token to test what it just deployed
GitHub OIDC gives CI an AWS identity, but a JWT-authorized MCP endpoint needs a second one: a Cognito client_credentials token read from terraform output.
A hand-authored, self-verifying CSP for Astro on Vercel — after security.csp broke offline support
Astro's own security.csp feature silently breaks service-worker registration. A hand-authored CSP for Astro on Vercel, verified by CI and a real browser.