Keep Secrets secure outside of configuration in Drupal with the Key module

Kevin — Thu, 09 Nov 2023 18:29:47 GMT

Security is a paramount feature of any modern CMS. Drupal has a well defined authentication and RBAC (role based access control) system limiting the scope of what users can or cannot do. Soon we will even have PBAC (policy based access control) in Drupal core. But what about securing other things, like API tokens, SSL certificates or secrets that are used to authenticate with external services that enable features that require authorization?

Kevin November 9th, 2023

Automatically update Drupal core, Drupal modules, and Docker images with Renovate

Kevin — Fri, 21 Oct 2022 12:01:30 GMT

Automatically update Drupal core, Drupal modules, and Docker images with Renovate

As promised in the last post, here is a new article over on the Velir blog. It is an in-depth introduction to using Renovate to keep your projects updated automatically and stay ahead of security issues - no matter if you are using Drupal, PHP, Go, NPM, Docker, Ruby or Rust (and many more).

Kevin October 21st, 2022