Security Bloghttps://blog.wavespro.net/https://blog.wavespro.net/en/posts/keyless-deploy-with-oidchttps://blog.wavespro.net/en/posts/keyless-deploy-with-oidcHow this blog deploys to Azure Static Web Apps with zero long-lived secrets on GitHub: workload identity, federated credentials, OIDC Discovery, the two-token dance, and trust boundaries.Fri, 03 Jul 2026 00:00:00 GMTsecurityazureoidcci-cdhttps://blog.wavespro.net/en/posts/view-transitions-and-islandshttps://blog.wavespro.net/en/posts/view-transitions-and-islandsPair the native View Transitions API with Astro Islands to land smooth cross-page motion and scoped interactivity — while keeping the zero-JS default and a sub-50 KB first-paint budget.Sun, 28 Jun 2026 00:00:00 GMTastroperformanceuxhttps://blog.wavespro.net/en/posts/strict-csp-on-static-hostinghttps://blog.wavespro.net/en/posts/strict-csp-on-static-hostingShipping script-src 'self' on Azure Static Web Apps: why per-request nonces are off the table, the Trusted Types / Pagefind trade-off, and pinning every header in staticwebapp.config.json.Wed, 24 Jun 2026 00:00:00 GMTsecuritycspazurehttps://blog.wavespro.net/en/posts/hello-astrohttps://blog.wavespro.net/en/posts/hello-astroA tour of the stack behind this bilingual blog: Astro 5 Islands, zero-JS by default, Tailwind v4 CSS-first, and why I picked Astro over Next.js or a plain static generator.Sat, 20 Jun 2026 00:00:00 GMTastrometafrontend