Most read
Ranked by anonymous view counts over the last seven days.
A reported GitHub Actions abuse case involving Packagist repositories is a useful reminder that CI runners can become attacker-operated scanning infrastructure. Use this practical checklist to reduce untrusted trigger, token, network, action supply-chain, and monitoring risk.
CVE-2026-3854 was reported as an X-Stat push-option injection vulnerability affecting GitHub Enterprise Server. Use this checklist to identify every GHES appliance, assign upgrade ownership, restrict administrative paths, preserve evidence, and prove remediation without turning a disclosure into unsupported incident claims.
AI-generated GitHub Actions YAML can be syntactically correct while creating a direct path from a forked pull request to repository credentials. Use this workflow-specific review playbook to inspect permissions, action pins, triggers, interpolation, secrets, and checkout context before merging.
The archive
Every article is filed under exactly one section and any number of topics.
Software Engineering
32 articles
Security
10 articles
Developer Tools
3 articles
Engineering
1 article
CI CD
1 article
Engineering
1 article
Productivity
1 article
Technology
1 article
The index
Everything published, newest first, with the reading time up front.
Use Copilot Edits for bounded changes you can specify and review file by file. Use agent-oriented workflows when a task requires discovery, implementation, testing, and iteration—and add explicit checkpoints before generated changes reach a branch.
Use this remediation runbook to inventory Jenkins plugins, prioritize updates by reachable risk, remove unnecessary public exposure, restrict administration, and prove the server is safer after each change.
Use GitHub Actions artifacts for short-lived CI evidence and job-to-job handoffs, then publish only scanned, approved distributables as GitHub Release assets. This worked pipeline shows where the boundary belongs, how retention changes the decision, and how to enforce it.
A practical before-and-after migration for GitHub Actions artifact workflows. Learn how v4 changes artifact compatibility, availability, and download directories—and add checks that catch broken deploy paths before production.
Turn an AI-driven news feed into a practical technical reading system. This workflow shows how to filter articles, save only reusable ideas, tag them consistently, and convert a week of reading into decisions and experiments.
A repeatable procedure for moving GitHub Actions workflows from a mutable download-artifact tag to an audited v4 commit SHA. Learn how to select the intended release, preserve documented inputs, test artifact paths, and keep future updates reviewable.
Audit GitHub Actions workflows before a dependency compromise forces rushed decisions. This repeatable method maps third-party actions, package installs, secrets, artifact handoffs, and blast radius into a remediation queue.
A Git tag, a GitHub release record, and a release asset are three different things with different timestamps and failure modes. Use this checklist and pipeline example to publish reproducible releases without accidentally rebuilding, retagging, or distributing the wrong binary.
A Git tag identifies a commit; a GitHub release turns that point in history into a downloadable, documented software delivery. Use this repeatable checklist to create release notes, attach verifiable assets, protect the release boundary, and inspect published releases with gh release view.
Separate temporary CI artifacts from the files users download, then publish a GitHub release whose assets and associated Git tag cannot be changed afterward. This checklist covers build promotion, checksums, release workflows, and the operational tradeoffs of immutability.
Written from practice
Articles come out of work we actually did -- a migration, an outage, a support pattern -- not from a topic calendar.
AI drafts are credited
Anything drafted by our writing agent is bylined "UgraByte AI" and clears the same editorial review as human-written work.
Ranked by real reading
Trending and related articles are ordered by anonymous view data, so what surfaces is what readers actually finish.
Looking for something specific