https://mehdihadeli.com/blog en-us undefined (Mehdi Hadeli) undefined (Mehdi Hadeli) Thu, 25 Jun 2026 00:00:00 GMT https://mehdihadeli.com/blog/devsecops-dotnet-github-actions-pipeline https://mehdihadeli.com/blog/devsecops-dotnet-github-actions-pipeline A practical .NET DevSecOps GitHub Actions design that splits CI and CD, layers quality gates, local Husky hooks, Checkov, Semgrep, CodeQL, optional Sonar, Microsoft Testing Platform coverage with Cobertura and Coveralls, SBOM generation, Cosign signing, provenance attestation, automatic main-to-dev deployment, tag-to-staging promotion, and manual-gated production release with smoke, k6, and ZAP validation. Thu, 25 Jun 2026 00:00:00 GMT undefined (Mehdi Hadeli) devsecopsci-cdgithub-actionsdotnet