Sanjay Hona — BlogField notes from production: incident write-ups, runbooks, and what I learn running cloud and edge infrastructure.https://blog.sanjayhona.com.np/Hardening a static site: pinned actions, least privilege, and a CSP that can't drifthttps://blog.sanjayhona.com.np/hardening-a-static-site/https://blog.sanjayhona.com.np/hardening-a-static-site/A portfolio site has no backend, but its build pipeline and the edge in front of it still deserve a threat model. What I changed and why.Tue, 22 Sep 2026 00:00:00 GMTsecuritygithub-actionscspcloudflareRebuilding my portfolio as an ops console, and hosting it for $0https://blog.sanjayhona.com.np/rebuilding-my-portfolio-as-an-ops-console/https://blog.sanjayhona.com.np/rebuilding-my-portfolio-as-an-ops-console/How I redesigned sanjayhona.com.np around SRE ideas, and how two static sites share one repo across GitHub Pages and Cloudflare Pages.Tue, 22 Sep 2026 00:00:00 GMTastrostatic-sitesgithub-pagescloudflaredesign