Git & GitHub
Version history for every change; powers the public changelog.
Stack
What runsthis site.
Every tool here is labelled honestly: in use, planned, or a separate lab project. Click through for the docs.
Build & ship
GitHub Actions
Builds and checks every change; tests the live site and API every hour.
Linux
All automation runs on Ubuntu runners; checks are shell and Node scripts.
Astro + TypeScript
Builds the site into plain static files: fast, with almost nothing to attack.
Cloudflare Workers
Hosts the site worldwide and runs the small API on /api.
Security
SAST (CodeQL)
Scans the code for security bugs on every change and weekly.
Dependabot
Alerts on vulnerable dependencies and opens update pull requests.
OWASP Top 10
Every risk mapped to how this site handles it.
Security headers & TLS
Strict CSP, HSTS and friends — verified every hour.
APIs
REST API
Public read-only endpoints for the glossary and changelog.
Postman
A tested collection (16 assertions) run hourly with Newman.
OpenAPI
Machine-readable description of every endpoint.
Next up
Python + AWS Lambda
A free “check your website's security headers” tool.
Terraform
Define the Lambda tool and DNS as code.
Docker
Package the Python tool so it runs the same everywhere.
SQL & databases
Only if a feature genuinely needs stored data.
SIEM (Splunk / ELK)
A home-lab project and write-up, not part of this site.
Kubernetes
A home-lab project — overkill for a static site.