jwright/bztmon-site
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: jwright/bztmon-site:03b0cf7c7f386fee0b770d60d9d7a90d68a2510a
Branches Tags
jwright/bztmon-site:main jwright/bztmon-site:feat/batcomputer-facelift
...
compare: jwright/bztmon-site:9e177dcc41e07df36a03704d6fa05037159987ad
Branches Tags
jwright/bztmon-site:main jwright/bztmon-site:feat/batcomputer-facelift

2 Commits
03b0cf7c7f ... 9e177dcc41

Author SHA1 Message Date
jwright 9e177dcc41 ui+content: zoom the backdrop + de-dupe blog titles
build-and-deploy / build (push) Failing after 11m32s
Details 
- Backdrop image scaled 168% → 215% so the Bat-Computer board reads bigger
  and more immersive, with more room for the scroll-pan.
- Retitle the least-privilege post "The most secure credential is the one
  you never mount" → "Every pod holds a key to a door it never opens" so it
  no longer mirrors the "...inbound port is the one you never open" post.
 2026-06-27 20:42:02 +10:00
jwright 99455d0168 chore(deps): upgrade Astro 6.4 → 7.0 (Vite 8) 
Bumps astro to 7.0.3 and @astrojs/check to the matching release. Vite 8
under the hood; @tailwindcss/vite/sitemap/rss already compatible, Node 22
satisfied. Verified end-to-end: typecheck (0 errors), build, dist scan,
audit gate, and visual render (hero + blog + Shiki) all clean under the new
Rust compiler + Markdown pipeline.
 2026-06-27 20:42:02 +10:00
4 changed files with 1393 additions and 58 deletions
Expand all files Collapse all files
package-lock.json
Generated
+1387 -54
View File
File diff suppressed because it is too large Load Diff
package.json
+1 -1
View File
@@ -18,7 +18,7 @@
"@astrojs/rss": "^4.0.18", "@astrojs/rss": "^4.0.18",
"@astrojs/sitemap": "^3.7.3", "@astrojs/sitemap": "^3.7.3",
"@tailwindcss/vite": "^4.3.1", "@tailwindcss/vite": "^4.3.1",
"astro": "^6.4.7", "astro": "^7.0.3",
"tailwindcss": "^4.3.1" "tailwindcss": "^4.3.1"
}, },
"devDependencies": { "devDependencies": {
src/content/blog/workload-least-privilege.md
+1 -1
View File
@@ -1,5 +1,5 @@
--- ---
title: "The most secure credential is the one you never mount" title: "Every pod holds a key to a door it never opens"
date: 2026-06-23 date: 2026-06-23
summary: "Least privilege for Kubernetes workloads doesn't start with an RBAC role — it starts with revoking the API token every pod silently carries, then layering identity, non-root, and Pod Security on top." summary: "Least privilege for Kubernetes workloads doesn't start with an RBAC role — it starts with revoking the API token every pod silently carries, then layering identity, non-root, and Pod Security on top."
tags: ["kubernetes", "security", "least-privilege", "rbac", "service-accounts"] tags: ["kubernetes", "security", "least-privilege", "rbac", "service-accounts"]
src/styles/global.css
+4 -2
View File
@@ -371,8 +371,10 @@ svg {
position: absolute; position: absolute;
top: 50%; top: 50%;
left: 50%; left: 50%;
width: 168%; /* Zoomed in — larger than viewport so the board reads big/immersive and the
height: 168%; scroll-pan has room to travel. */
width: 215%;
height: 215%;
object-fit: cover; object-fit: cover;
transform: translate(-50%, -50%); transform: translate(-50%, -50%);
will-change: transform; will-change: transform;