A Retrospective Survey of 2024/2025 Open Source Supply Chain Compromises
Analysis of 2024/2025 open source supply chain compromises, categorizing root causes like control handoff, phishing, and CI/CD vulnerabilities.
Analysis of 2024/2025 open source supply chain compromises, categorizing root causes like control handoff, phishing, and CI/CD vulnerabilities.
A guide on using GitHub Actions to securely checkout a specific branch from a private repository, enabling reusable components in CI/CD workflows.
Guide to publishing NuGet packages from GitHub Actions using Trusted Publishing, eliminating API key management.
A DevOps engineer reflects on their 7-year journey at Aptiv, detailing the evolution of complex automotive CI/CD systems and team growth.
A guide on implementing CI/CD pipelines for Azure Foundry AI agents, covering automation, infrastructure as code, and developer tools.
A guide to deploying self-hosted GitHub Actions runners on a home Kubernetes cluster using the Actions Runner Controller (ARC).
A tutorial on automating GitHub stats and release note generation using GitHub API and CircleCI scheduled pipelines.
Solving Puppeteer Chrome errors during Netlify builds using Chromium integration or package.json scripts.
Discusses the risks of suppressing lint rules in code and proposes a meta-lint rule to prevent suppressing critical rules.
A developer's story about using git-bisect to diagnose a performance regression and the importance of proactive performance testing in software development.
A developer details their process for cleaning and standardizing their GitHub repositories, including archiving old projects and creating a professional checklist.
A curated newsletter issue covering the latest news, articles, and tools for mobile automation, including iOS, Android, and Flutter testing and CI/CD.
A developer's weekly update covering Vale CLI version conflicts, docs-as-code tips, React Native drafts, and tech reading.
A curated newsletter issue covering mobile automation news, tools, and best practices from companies like Netflix and Dropbox.
A guide to managing Azure Databricks workspace IP access lists using CICD pipelines and the Databricks CLI, covering authentication and tooling challenges.
A developer shares lessons from two failed CI/CD products and how they led to creating CI Insights, an observability tool for CI pipelines.
Explains the importance of pinning the Vale CLI version in GitHub Actions to avoid CI failures and ensure consistent linting results.
A curated newsletter issue covering mobile automation topics, including CI/CD, testing, and performance optimization for iOS, Android, and cross-platform development.
Biweekly newsletter covering mobile automation news, CI/CD, testing strategies, and tools for iOS, Android, and cross-platform development.
A tech team's story of pivoting from a CI cost tool to a CI reliability product, only to realize they built great tech but not a viable product.