1. X
  2. Riptides
Log inSign up
Riptides
36 posts
Image
user avatar
Riptides
@riptidesio
Control what agents can do. Trace everything they did.
San Francisco
riptides.io
Joined March 2025
109
Following
30
Followers
RepliesRepliesMediaMedia

Log in or sign up for X

See what’s happening and join the conversation

Continue with phone
or
Log in with username or email
Terms·Privacy·Cookies·Accessibility·Ads Info·© 2026 X Corp.
  • user avatar
    Riptides
    @riptidesio
    Jul 27
    Still fighting your SPIRE rollout? You picked up a reference implementation and expected a complete solution. Managed SPIRE doesn't fix that either, same architecture, someone else babysitting it. Wrote up the other way to get SPIFFE:
    riptides.io
    Adopting SPIFFE Should Not Require an Engineering Team | Riptides
    SPIFFE is the right identity standard, most engineers who've tried to run SPIRE in production will tell you that. The pain is the operational model built to prove it works: a server, a fleet of...
    20
  • user avatar
    Riptides
    @riptidesio
    Jul 6
    Your CI/CD pipeline is a supply chain attack gold mine. Stop authenticating jobs with secrets. Give every GitHub Actions job a real cryptographic identity instead.
    riptides.io
    Your GitHub Actions Job Deserves a Real Identity | Riptides
    GitHub secrets are shared, static, and opaque. Riptides gives every GitHub Actions job a cryptographic workload identity, then uses it to inject credentials and track every connection it makes, with...
    32
  • user avatar
    Riptides
    @riptidesio
    May 18
    Unified TUI for inventory, health-check, and track every API key issued across your AI providers.
    riptides.io
    Introducing KeyLedger: Because You Probably Don't Know How Many AI Keys Your Org Has | Riptides
    Most organizations have no idea how many AI API keys they've issued across OpenAI, Anthropic, Google Cloud, and AWS, let alone which ones are stale, orphaned, or exposed. KeyLedger is a new open...
    35
  • user avatar
    Riptides
    @riptidesio
    Mar 10
    AI agents are becoming incredibly helpful. They also tend to hold credentials that unlock far more than they should. Utility is rising. So is overprivilege.
    riptides.io
    Our AI Is Helpful. Also Slightly Overprivileged. | Riptides
    MCP makes AI assistants genuinely useful by connecting them to real systems. But once agents start acting through MCP servers, a new question appears quietly in the background: who is actually...
    87
  • user avatar
    Riptides
    @riptidesio
    Feb 23
    Why manage secrets when you can exchange identities? Discover how our open-source tokenex library simplifies secretless Azure access by turning external identity into short-lived, native cloud credentials for a more secure and scalable architecture.
    riptides.io
    Secretless Azure access with tokenex: Federated Identity via User-Assigned Managed Identity |...
    Why manage secrets when you can exchange identities? Discover how the open-source tokenex library simplifies secretless Azure access by turning external identity assertions into short-lived, native...
    37
  • See @riptidesio's full profile

    Sign up
    Log in
Advertisement
Advertisement