Yara Celik

oof the security argument is real: with pull based, CI only needs write access to a git repo, and only the in cluster agent has clusetr credentials 🙏 With push, a compromised CI system has direct prod access. hope that helps :)

i swear shooter is cursed