Join us

ContentUpdates and recent posts about ForgeMT..
Link
@faun shared a link, 5 months ago
FAUN.dev()

How GitHub engineers tackle platform problems

Product engineersare like builders ofGundam models, construcing the final product, whileplatform engineerssupply the tools needed to build these kits. Understanding theGundam analogyhelps differentiate engineering roles at GitHub... read more  

Link
@faun shared a link, 5 months ago
FAUN.dev()

kubriX: Your Out-of-the-Box Internal Developer Platform (IDP) for Kubernetes

Discover how kubriX seamlessly integrates leading open-source tools like Argo CD, Kargo, and Backstage to deliver a fully functional IDP out of the box. This blog post provides a deep dive into the technical aspects of kubriX, showcasing its capabilities and value proposition within the realm of Int.. read more  

Link
@faun shared a link, 5 months ago
FAUN.dev()

What Is IDOR? Finding and Preventing Insecure Direct Object References in AWS APIs

Attackers swap predictable IDs. They slip intoAWS APIs,Lambda functions, internal tools. Fuzzers likeffufflag sneaky HTTP 200s.Burp Intruderbubbles up 404 probes.CloudWatchlogs trace every call. Random UUIDs seal ID gaps... read more  

What Is IDOR? Finding and Preventing Insecure Direct Object References in AWS APIs
Link
@faun shared a link, 5 months ago
FAUN.dev()

How Zapier runs isolated tasks on AWS Lambda and upgrades functions at scale

Zapier snaps each customer Zap into its ownAWS Lambda, cradled inside leanFirecracker microVMs. It wrangles 100k+ functions under anEKScontrol plane and inventory DB. When runtimes retire, Zapier swings into action: a set ofTerraform modulespaired with a customLambda canary tool. Traffic trickles in.. read more  

How Zapier runs isolated tasks on AWS Lambda and upgrades functions at scale
Link
@faun shared a link, 5 months ago
FAUN.dev()

The Cybersecurity Blind Spot in DevOps Pipelines

DevOps pipelines serve as superhighways for cybercriminals to target with credential leaks, supply chain infiltration, misconfigurations, and dependency vulnerabilities. Security must evolve with development to combat these sophisticated attacks... read more  

Link
@faun shared a link, 5 months ago
FAUN.dev()

Self-hosting Trigger.dev v4 using Docker

Trigger.dev v4 sharpens self-hosting. It pins everything toDocker Compose. It bakesregistryandobject storagein. It chops YAML bloat. Env-var docs unify configs. Resource caps lock down security. Scaling? Spin up more worker containers... read more  

Self-hosting Trigger.dev v4 using Docker
Link
@faun shared a link, 5 months ago
FAUN.dev()

10 Best API Monitoring Tools in 2025

API monitoring tracks latency, errors and uptime. Tools tag real-time metrics. They fire alerts. They map traces. They automate tests. They crunch analytics. Examples span OSS starsPrometheus,Graphiteand SaaS champsAppDynamics,Postman. Each hooks into CI/CD pipelines and plants global synthetic prob.. read more  

10 Best API Monitoring Tools in 2025
Link
@faun shared a link, 5 months ago
FAUN.dev()

Building a Secure, Scalable, and Automated Cloud-Native Platform on AWS with EKS, GitOps, and…

The blueprint carves out production-grade AWS infra. Terraform orchestrates VPCs with public and private subnets, deploys a Bastion host, spins up private EKS clusters, and stands up an internet-facing ALB armed with SSL/TLS. Argo CD drives GitOps. The CI pipeline runs SAST, builds Docker images, hu.. read more  

Building a Secure, Scalable, and Automated Cloud-Native Platform on AWS with EKS, GitOps, and…
Link
@faun shared a link, 5 months ago
FAUN.dev()

Serverless: The Illusion of Choice

A LinkedIn thread exposes a hack around AWS EventBridge’s256KBlimit. Someone chains Lambdas tocompressthendecompressevents. Serverless traps lurk: blown-upIAMpermissions. Triggers with zero validation. Wide-openegress. Unscanned packages fueling supply chain bombs... read more  

Serverless: The Illusion of Choice
Link
@faun shared a link, 5 months ago
FAUN.dev()

We Added Chaos to Our CI/CD Pipelines — It Made Everything More Stable.

Wix’sMREteam injectsAI-drivenchaosintoCI/CDpipelines. Mobile releases gain speed and rock-solid stability. They harness hackathon-born prompt tests to bulletproof builds and deployments. Signal: AI resilience trials in pipelines mark a shift from rigid builds to probabilistic validation... read more  

We Added Chaos to Our CI/CD Pipelines — It Made Everything More Stable.
ForgeMT is an open-source, production-grade platform designed to solve the complexity of running GitHub Actions runners at scale. Instead of teams managing their own fragile and duplicated CI runner setups, ForgeMT centralizes orchestration into a single, multi-tenant system built for scalability, security, and cost efficiency.

The platform provisions ephemeral runners on both EC2 and Kubernetes (EKS) using Terraform and Terragrunt, ensuring workloads scale up instantly and tear down to zero when idle, reducing costs. It enforces strong tenant isolation with AWS IAM, OIDC integration, and network segmentation, giving each team a secure boundary without requiring separate infrastructure.

ForgeMT integrates seamlessly with GitHub via a GitHub App and webhook events, automatically spinning up the right type of runner when jobs start. It supports advanced autoscaling strategies with Karpenter, spot instance optimization, and observability through centralized logging and monitoring.

By removing operational overhead, ForgeMT helps organizations accelerate delivery, cut cloud costs, and meet security requirements — all while giving developers fast, ephemeral CI runners that just work.