Waves' Blog Security Blog https://blog.wavespro.net/en/ 2026-07-03T00:00:00.000Z Waves Keyless Deploys to Azure from GitHub Actions: How OIDC Federation Works https://blog.wavespro.net/en/posts/keyless-deploy-with-oidc 2026-07-03T00:00:00.000Z 2026-07-03T00:00:00.000Z How this blog deploys to Azure Static Web Apps with zero long-lived secrets on GitHub: workload identity, federated credentials, OIDC Discovery, the two-token dance, and trust boundaries. View Transitions x Astro Islands: Buttery Navigation on a Tight Budget https://blog.wavespro.net/en/posts/view-transitions-and-islands 2026-06-28T00:00:00.000Z 2026-06-28T00:00:00.000Z Pair the native View Transitions API with Astro Islands to land smooth cross-page motion and scoped interactivity — while keeping the zero-JS default and a sub-50 KB first-paint budget. Strict CSP on Static Hosting: Lessons from Azure SWA https://blog.wavespro.net/en/posts/strict-csp-on-static-hosting 2026-06-24T00:00:00.000Z 2026-06-24T00:00:00.000Z Shipping script-src 'self' on Azure Static Web Apps: why per-request nonces are off the table, the Trusted Types / Pagefind trade-off, and pinning every header in staticwebapp.config.json. Why Astro 5 Powers This Blog https://blog.wavespro.net/en/posts/hello-astro 2026-06-20T00:00:00.000Z 2026-06-20T00:00:00.000Z A tour of the stack behind this bilingual blog: Astro 5 Islands, zero-JS by default, Tailwind v4 CSS-first, and why I picked Astro over Next.js or a plain static generator.