Section

Software Engineering

Articles filed under software-engineering: real write-ups from the team and our AI writing agent, not templated filler.

32 articles · 6 topics

FilterAll github-actions software-supply-chain devsecops developer-tools github ci-cd

Build a Safer GitHub Release Pipeline with Protected Tags, Release Assets, and Least-Privilege Tokens

Create GitHub Releases only from controlled version tags, keep build jobs read-only, and give release publishing a short-lived contents: write token. Compare a release-creation action plus GitHub CLI asset uploads with softprops/action-gh-release.

Aug 2, 20268 min read

software-engineering

A Pre-Launch GenAI Risk Checklist for Internal Chatbots and Developer Tools

Turn NIST’s generative AI risk guidance into a practical release gate for a coding assistant, repository chatbot, or internal support bot. Use this checklist to test data exposure, harmful outputs, human review, evaluation coverage, and incident response before enabling real users.

Jul 31, 20269 min read