By Saber J.1 min read
SRE and DevSecOps without a gasworks
A few SLOs, CI that can go to prod, secret scanning. Too many tools is also a risk.
A platform holds if you measure it. That does not require twenty products.
Enough to start
One CI that can reach production. Logs you can search. A simple SLO. Secret and dependency scanning. A short incident note, not a theatre.
What we skip
Dashboards nobody opens. A security tool that pages at 2 a.m. for noise. A wiki that died in 2022.
Size the tooling to the team. Energy, cost, attack surface: they grow together.