<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Claude-Code on PCI Oasis Blog</title><link>https://blog.pcioasis.com/tags/claude-code/</link><description>Recent content in Claude-Code on PCI Oasis Blog</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Wed, 15 Apr 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://blog.pcioasis.com/tags/claude-code/index.xml" rel="self" type="application/rss+xml"/><item><title>Setting Up Workload Identity Federation: An Agent-Assisted Rollout</title><link>https://blog.pcioasis.com/posts/secure-devops/replacing-gcp-credentials-cicd-wif-setup/</link><pubDate>Wed, 15 Apr 2026 00:00:00 +0000</pubDate><guid>https://blog.pcioasis.com/posts/secure-devops/replacing-gcp-credentials-cicd-wif-setup/</guid><description>&lt;h1 id="setting-up-workload-identity-federation-an-agent-assisted-rollout"&gt;Setting Up Workload Identity Federation: An Agent-Assisted Rollout&lt;/h1&gt;
&lt;p&gt;&lt;em&gt;Part 2 of 2 — Implementation&lt;/em&gt;&lt;/p&gt;
&lt;p&gt;&lt;a href="./2026-04-15-replacing-gcp-credentials-in-cicd-with-wif.md"&gt;Part 1&lt;/a&gt; explained the concepts and the three decisions you need to make: where the WIF pool lives, whether to use branch or environment conditions, and who approves production deploys.&lt;/p&gt;
&lt;p&gt;This post walks through the actual rollout using an AI coding agent (Claude Code) to examine your existing infrastructure, propose a plan, and execute it step by step — with you reviewing and approving at every decision point. The agent handles the mechanical work. You make the security decisions.&lt;/p&gt;</description></item></channel></rss>