Tag: #ci
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 4 posts
When Does a Code Screenshot in Your Docs Start Lying — Turning Images into Build Artifacts
A code screenshot captured by hand and pasted into a document is an artifact with no source. The code changes and the image does not, so at some point it quietly starts showing something false. Generate the image from a
2026-08-09 · 8 min read #documentation#developer-tools#cli#ci#automationDependency Supply Chain Security — The Things a Lockfile Does Not Block
You wrote a dozen or so packages into package.json, yet more than a thousand get installed. This post explains why transitive dependencies are riskier than direct ones, and uses a real lockfile entry to show why an integ
2026-07-26 · 14 min read #security#supply-chain#npm#sbom#ciAnatomy of npm Supply Chain Attacks — Defense Strategies for the Era When Even Red Hat Got Hit
Triggered by the June 2026 incident in which even official Red Hat Cloud Services npm packages were exposed to malicious code, this post dissects the types of npm supply chain attacks and lays out the defense stack organ
2026-06-12 · 17 min read #npm#supply-chain#security#devops#sigstoreProperty-Based Testing in Practice — Catching the Bugs Examples Cannot
A practice-first guide to property-based testing (PBT), which catches the bugs that example-based tests miss. Covers the core concepts of properties, generators, and shrinking, a pattern catalog for discovering propertie
2026-06-12 · 17 min read #testing#property-based-testing#hypothesis#jqwik#fast-check