Skip to main content

Posts

Securing CI/CD Pipelines and Cloud APIs for San Diego Teams

Two parts of a cloud setup are easy to overlook and worth securing early: the build pipeline and the APIs your apps expose. This guide covers the practical controls for both, written for healthcare and fintech teams in San Diego that run production workloads in the cloud. Why pipelines need attention A CI/CD pipeline can build, deploy and change infrastructure, so it often holds more access than any single engineer. If it signs in to the cloud with a long-lived access key, that key becomes one of the most valuable secrets you have. Replace long-lived keys with OIDC federation Instead of storing a permanent cloud key in the pipeline, use OIDC federation so each run receives temporary credentials. There is no standing key left behind to leak. Keep secrets out of code Store sensitive values in your cloud provider's key or secrets management service rather than in repositories or shared build variables, and rotate keys on a schedule. Check compliance inside the pipeline P...
Recent posts

Lessons From San Diego on Automating Mining Work Orders

I have noticed that the slowest part of a mining work order is rarely the repair. It is the time between spotting a defect and getting the right technician to the right asset. Teams I talk with in San Diego who support mining and natural resources operations often describe the same pattern: the systems work, but the handoffs between them do not. The lessons below come from looking at where that time actually goes, and how a Power Automate workflow can close the gaps. Lesson One: The Handoffs Are the Real Problem Take a haul truck with a hydraulic leak. The defect lands on a paper card, then in an email, then in the ERP, then in the maintenance schedule, typed by three different people. Each retyping invites a mistake, and nobody is sure which record is current. Capturing every request in one structured record, whatever its source, removes most of that confusion before a person even touches it. Lesson Two: Validate Before You Distribute If I could give only one piece of advice, it would...

Native vs Cross-Platform: Which Fits Your San Diego Team?

  Quick answer: Native app development means building a separate app for iOS (Swift) and Android (Kotlin). It is the best choice for hardware-dependent features, biometric security, accessibility and performance. Cross-platform tools suit content-led screens. For San Diego teams, the smartest way to choose between native and cross-platform is feature by feature, not for the whole app at once. Native vs cross-platform in brief Native: Immediate access to new OS features, the highest performance, and a look and feel that matches each platform. The trade-off is two codebases. Cross-platform (React Native, Flutter): One shared codebase and near-native speed for most screens. Newer device features may need plugins or custom native code. Where native clearly wins Hardware : Health data, Bluetooth devices and background location work most reliably in native code. Security : Face ID, fingerprint login and secure key storage are safest when built directly on the operating system. Acces...

What Determines Healthcare Software Costs in San Diego?

Healthcare organizations are increasingly investing in digital solutions to improve patient experiences, streamline administrative tasks, and make healthcare services more accessible. However, one question often comes up before development begins: how much will the software actually cost? The answer depends on more than the size of the application. Features, security requirements, integrations, and future growth plans all influence the budget. Understanding these factors early helps healthcare businesses make informed decisions and avoid unexpected expenses. Every Healthcare Solution Has Different Requirements A patient appointment app and a comprehensive hospital management platform serve very different purposes. A basic application may focus on scheduling and patient registration, while a more advanced system could include electronic health records, billing, telemedicine, and reporting. Accordingly, healthcare software development can range from tens of thousands of dollars for a foc...

Epic MyChart Test Automation: Fix Flaky QA with Playwright

  Testing an Epic MyChart portal is not like testing a regular website. At a glance it may seem straightforward, but things get complicated fast. Custom features often load inside iframes. Scripts change the page after it loads. Every step must follow HIPAA rules. That is why test suites across the USA keep failing when they interact with an Epic portal, from San Diego to Los Angeles, San Francisco and San Jose. At Bitcot, we see the issue come down to four factors. First, iframes: many apps built on SMART on FHIR sit inside frames, so tools that expect a single flat page cannot find the elements they need. Second, the page changes itself: custom scripts run after the page loads. They swap elements, regenerate IDs and reorder content, so a test that worked yesterday fails today even if the application is unchanged. Third, content arrives late: lab results, appointment slots and messages load after the page appears to be done. Fourth, compliance controls: every test must handle log...

Team Apparel Ecommerce Platform for Roster Orders on Shopify

A team apparel ecommerce platform is an online store built around teams rather than individual shoppers. It handles rosters, player names and numbers, club-level stores and bulk ordering, which a standard storefront was never designed to do. If you sell team apparel anywhere in the U.S., from youth leagues to high school programs, you've probably felt this already. The catalog looks fine. The trouble starts at checkout. Why does one team order break a normal online store? Picture a youth soccer club ordering for one team: forty jerseys, forty pairs of shorts, forty pairs of socks. Every jersey needs its own size, player name and number. Multiply that by a few dozen teams in a season and you're no longer managing products. You're managing people. Most stores track items. Team apparel has to track players. When that data lives in order notes, spreadsheets or email threads, mistakes follow: a duplicate number, a missing size, a reorder that costs the club a week before opening...

Is This Process Ready for RPA? A 10-Minute Scoring Method

Most RPA projects don't fail at the coding stage. They fail the moment someone picks the wrong process to automate. It usually sounds reasonable at the time. "This task takes the team 30 hours a week, so let's automate it." But hours spent is only one piece of the picture. A process can eat up a lot of time and still be a poor candidate for a bot, because it's full of judgment calls, messy inputs, or systems that change every month. The cost of getting this wrong is real. EY's Get Ready for Robots report found that as many as 30 to 50% of initial RPA projects fail, even though the technology itself works. Deloitte's 2020 intelligent automation survey named process fragmentation as the top barrier to scaling automation, with only 38% of organizations reporting mature process definitions. IN THIS GUIDE The five questions that predict whether a process is ready for RPA A scorecard you can copy into any spreadsheet How to read the total, plu...