ali_piccioni

19 ms·

1.
by ali_piccioni 1y ago
I moved all my precommit hooks to prepush hooks. I don’t need a spellchecker disrupting my headspace when I’m deep into a problem. My developer environments are setup to reproduce CI test locally, but if I need to resort to “CI driven devel
2.
by ali_piccioni 2y ago
Wittgenstein’s ruler in action.
3.
by ali_piccioni 2y ago
It highlights a classic management failure that I see again and again and again: Executing a project without identifying the prerequisite domain expertise and ensuring you have the right people.
4.
by ali_piccioni 2y ago
The information can be compressed into a table that shows what knowledge (columns) each party gain (rows) at each stage (cells) of the connection. Can Can Transmit | Receive Client SYN-ACK SYN—AC
5.
by ali_piccioni 2y ago
In priority, 1. Stop using API keys. Configure SSO integration for developers and OIDC for automation. For example, this is very easy to setup with AWS. 2. If the above is not possible, then store credentials encrypted at rest. Decrypt them
6.
by ali_piccioni 2y ago
The rules are open source. We did run into some road bumps in Rules Rust, that required patches or clever work arounds. But I believe the community has made great strides to improve Bazel’s Rust support in the last five years. To be frank,
7.
by ali_piccioni 2y ago
We had an integration test that involved many tool chains and languages to prepare. Rust compilation, WASM compilation, Docker builds shell scripts that produced a VM image, Python was in there somehow too, and then a test harness, written
8.
by ali_piccioni 2y ago
Long lived credentials are a security red flag. We setup our AWS organization’s policies (SCPs) to prohibit long-lived tokens. Instead access goes through SSO or OIDC. It’s difficult to track usage behind access tokens, prevent leaks, and e
9.
by ali_piccioni 3y ago
Having led a successful Bazel migration, I'd still recommend many projects to stick to the native or standard supported toolchain until there's a good reason to migrate to a build system (And I don't consider GitHub actions t