|
By adding Snyk’s native integration with Azure Repos, each pull request will be tested to ensure new vulnerabilities aren’t introduced into the code base. Policies can be defined to configure the severity level of a vulnerability that fails the merge. The following image displays a failed PR due to new vulnerabilities that it would have added:
|
|
Following the rule of least privilege, ensure that contributors exist in the correct groups and therefore have the necessary permissions to work. Try to restrict administrative actions where possible.
|
|
Azure Repos access is typically done using SSH keys or personal access tokens (in lieu of a password). But what happens if those tokens are stolen and you didn’t know? Be sure to refresh your keys and tokens periodically, mitigating any damage caused by keys that leaked out.
|
|
Expenses paid in cash between two dates ledger -f my.ledger reg "^Expenses" and expr 'any(account=~/Assets:Cash:Wallet/)' -b 02/19 -e 04/09 Bank account income between two dates ledger -f my.ledger reg "^Assets:Bank:Acme" and expr "amount > 0" -b 02/19 -e 04/09 Formatting reg output ledger -f my.ledger reg "^Assets:Bank:Acme" --format="%(payee) %(amount)\n"
|
|
Understanding grid placement through building a HTML periodical table
-
chenhuijing.com
-
7 years ago
-
eng
I've been using CSS grid to build layouts for quite a while now, and all my designs to date involved either a handful of explicitly placed individual grid…
|
|
Test Driven Development is the best thing that has happened to software design
-
www.thoughtworks.com
-
7 years ago
-
eng
The title of this post speaks for itself when I say I believe that Test Driven Development (TDD) has had a significant influence on software design. I'm in no way going to use this post to attempt to explain from scratch how TDD works, or how to master it, but instead, look at some key elements of how I apply TDD though real examples. TDD is an iterative approach. Just like say, a living organism evolves and adapts itself to its environmen..
|
|
Text editing is implemented natively in Codename One. This provides a huge benefit as it allows us to ignore a lot of complex topics such as virtual keyboard localization etc. If we had to implement all that logic the overhead of Codename One would have been huge… One free benefit is seamless support for copy & paste. It “just works” thanks to the usage of the native widget we don’t need to worry about that UI. However, this breaks down ..
|
|
Despite the fact that the NVIDIA Jetson Nano DevKit comes with Docker Engine preinstalled and you can run containers just out-of-the-box on this great AI and Robotics enabled board, there are still some important kernel settings missing to run Docker Swarm mode, Kubernetes or k3s correctly. So, let’s try to fix this… Analyzing the Linux Kernel In my last blogpost Verify your Linux Kernel for Container Compatibility , I already sh....
|
|
The first time I saw wdired in action, it blew my mind. wdired makes dired (directory editor) buffers writeable, so you can edit them like any other Emacs buffer. You can subsequently use all your favorite file-editing tricks to rename files (amongst other things). You can see it in action at the end of Emacs Rocks episode 16 . When combining find-dired with wdired, one can easily find matching files and quickly batch rename them u....
|
|
Writing a lisp compiler from scratch in JavaScript: 4. LLVM conditionals and compiling fibonacci
-
notes.eatonphil.com
-
7 years ago
-
eng
Previously in compiler basics: 1. lisp to assembly 2. user-defined functions and variables 3. LLVM Next in compiler basics: 5. LLVM system calls 6. an x86 upgrade In this post we'll extend the compiler 's LLVM backend to support compiling conditionals such that we can support an implementation of the fibonacci algorithm. Specifically we're aiming for the following: $ cat tests/fib.lisp ( def f....
|
|
In this blog, we take a look at the libraries that, because they contain today’s most common vulnerabilities, also most frequently appear in Snyk project scans.
|
|
I had a hard time getting Sublime Text to work with Marked 2 , back when I used Brett’s app to proof my writing. Dan Sturm posted a simple snippet that launched it using a build system, that failed if Marked came from the App Store. Here’s the fix: Permalink.
|
|
Implementing Domain Driven Design at Small Improvements
-
tech.small-improvements.com
-
7 years ago
-
eng
We all love reading about the latest software developments trends and buzzwords but they can often turn out to be just that, buzzwords. For us at Small Improvements, Domain Driven Design (DDD) has really lived up to it’s own hype though and helped us build better software, faster and fewer bugs to boot. Do we have […]
|
|
Maestro is a library we have developed to handle all playback across SoundCloud web applications. It successfully handles tens of millions of plays per day across soundcloud.com, our mobile site, our widget, Chromecast, and our Xbox application. We are considering open sourcing it, and this blog post is a technical overview of what we’ve achieved thus far with Maestro.
|
|
Maestro is a library we have developed to handle all playback across SoundCloud web applications. It successfully handles tens of millions of plays per day across soundcloud.com, our mobile site, our widget, Chromecast, and our Xbox application. We are considering open sourcing it, and this blog post is a technical overview of what we’ve achieved thus far with Maestro.
|
|
I’ve had a very particular itch for a long time, now. Something I love about open source is that it empowers developers to scratch their own itches, and a while back I decided to do exactly that. We’ve used it in production on the Nextcloud snap for a few months with relatively few issues, so I think it’s time to open it up for wider use… in case you share my itch.
|
|
Chris seems to understand my remoteness better than they do, perhaps because he’s more used to it and his relationship to me is such that he has to be more concerned. In his face I sometimes see a look of worry, or at least anxiety, and wonder why, and then discover that I’m angry. Other times he’s running and jumping all over the place and I wonder why and discover that it’s because I’m in a good mood.”
|
I Recently complete a basic ncurses based terminal application for minglinng with bits. I’m working low level most of the times and need to tinker with bits, masks and to translate between number bases (hex to dec, and vice verse). As I’m working 99% of my time in a terminal, I found it very annoying […]
|
|
A few days ago, I decided to start an article about my writing setup. Over the years I have dialed it in, and today I have a pretty neat workflow. As I started on that piece, though, I realized that I had never talked about why I write in plain text. Most aspects of my workflow traces back to that choice, so today I want to explain some of the reasons I made it. Permalink.
|
In this post we are going to manage nested objects of a document indexed with Elasticsearch. The nested type is a specialised version of the object datatype that allows arrays of objects to be indexed in a way that they can be queried independently of each other. – Nested datatype - Official Elasticsearch reference Prerequisites To follow this post you need: an up and running Elasticsearch instance I use 6.7 here an up....
|
|
In this post we are going to manage nested objects of a document indexed with Elasticsearch. The nested type is a specialised version of the object datatype that allows arrays of objects to be indexed in a way that they can be queried independently of each other. – Nested datatype - Official Elasticsearch reference Prerequisites To follow this post you need: an up and running Elasticsearch instance I use 6.7 here an up....
|
|
In this post we are going to manage nested objects of a document indexed with Elasticsearch. The nested type is a specialised version of the object datatype that allows arrays of objects to be indexed in a way that they can be queried independently of each other. – Nested datatype - Official Elasticsearch reference Prerequisites To follow this post you need: an up and running Elasticsearch instance I use 6.7 here an up....
|
|
In this post we are going to manage nested objects of a document indexed with Elasticsearch. The nested type is a specialised version of the object datatype that allows arrays of objects to be indexed in a way that they can be queried independently of each other. – Nested datatype - Official Elasticsearch reference Prerequisites To follow this post you need: an up and running Elasticsearch instance I use 6.7 here an up....
|
|
When I first moved to the Bay area I was fresh out of grad school. I was frequently heading out to dinner or to happy hour after work with colleagues. I was young and single, so why not of course. As time passed, marriage, kids, etc. the ability to go out for a quick drink or dinner was competing with various priorities. Dinner and drinks with co-workers was always a great time. It wasn’t just about hanging out, it built rapport and trust w....
|
|
When I first moved to the Bay area I was fresh out of grad school. I was frequently heading out to dinner or to happy hour after work with colleagues. I was young and single, so why not of course. As time passed, marriage, kids, etc. the ability to go out for a quick drink or dinner was competing with various priorities. Dinner and drinks with co-workers was always a great time. It wasn’t just about hanging out, it built rapport and trust w....
|
|
Starting today, developers can test, fix, and monitor their Azure Repos projects for open source vulnerabilities.
|
|
Avoiding Javascript also means missing out on cool tricks like these, that make writing good code easier when we have no choice but to use it. I work hard to optimize the Python behind this site , but did almost nothing with the 400 lines of uncommented Javascript code behind my LMTV RV builder . I have some serious work ahead of me on that project, and simple tips like these from Antonio Sanchez will make that a lot easier. Permali..
|
|
With today’s Serverless Framework Enterprise release, we are extending the capabilities of Serverless Error Insights to support invocation logs access along with stack traces & more.
|
|
We're continuing to extend our Container Vulnerability Management offering, now providing integration with your container image registries as well.
|
|
Responsibility is only possible by granting ownership and setting expectations. If you don't turn over ownership, don't expect folks to take responsibility. When you grant ownership and set expectations, you'll be astounded what folks will accomplish without you. I am astounded.
|
|
Thoughtworks and MeetupAI welcomed a group of speakers and panelists, presented by Anna Gudmundson, to discuss the business value of ethical Artificial Intelligence and Machine Learning.
|
|
Docker Hub may have reset your account details if it detected that it was part of the breach. What could potentially happen? What should I do to protect my code?
|
I haven't seen a movie in theatres since Disaster Artist a few years ago. I try again, this time with Avengers: Endgame.
|