help!! i keep hearing that push-based deploys are insecure cuz CI needs credentials to production. For a solo maintainer running a handful of VMs, is that a real concern? What did you gain or lose when switching to pull-based?
our auditors have started asking who can change production and how its logged. today the anwser is teh CI system, and also anyone with SSH access. i suspcet thats not teh answer theyre hoping for. would a pull-based setup actually help with that, or is it mostly marketing? what am i doing wrong??
