Services, guides and case studies
I'm Brian Gomes, owner and principal engineer of Binary Virtual Solutions (BVS). I build and secure OpenShift and Kubernetes platforms, CI/CD pipelines and the automation around them, and I move applications from on-prem servers onto them.
The guides below come from work I do every day. Each one explains the fix in enough detail to do it yourself, and says when it makes sense to bring in help. The case studies are builds from my day job.
Problems BVS solves
Secure CI/CD pipelines
Security gates in a CI/CD pipeline: what to check, and where
Leak check, scan, test, sign, verify: the gates in order, mapped to the NIST SSDF.
Self-hosted CI runners
How to run self-hosted GitHub Actions runners on OpenShift
Ephemeral runners that start in OpenShift for a build and shut down when it ends.
Application migration
How to migrate an application to Kubernetes and OpenShift
The steps from on-prem server to OpenShift, and what breaks along the way.
Container image security
How to scan Docker images with Trivy in GitHub Actions
Scanning every image in the pipeline, failing on what matters, and running the scanner safely after March 2026.
Secrets management
Vault init containers on Kubernetes: getting secrets out of Git
Secrets out of Git and out of chat, delivered to the pod at start-up by Vault.
Case studies
Case study
An internal developer platform that cut app onboarding from days to hours
Sole architect of a developer platform for 5 teams: onboarding and deployment from 4 to 5 days to hours.
Case study
Moving more than 10 applications from on-prem servers to OpenShift
More than 10 apps moved from on-prem servers to OpenShift test, 7 promoted to production.