First screen, captured .
408 points by robin_reala | 236 comments
Andrew Nesbitt's blog post arguing GitHub Actions functions as a package manager lacking lockfiles, integrity hashes, and other supply chain safeguards.
44 points by zdw | 39 comments
146 points by celiktom | 72 comments
408 points by robin_reala | 236 comments
Andrew Nesbitt's blog post arguing GitHub Actions functions as a package manager lacking lockfiles, integrity hashes, and other supply chain safeguards.
777 points by simonw | 599 comments
Simon Willison blog post arguing developers must prove their code works through manual and automated testing before submitting it, especially when using LLM tools.
325 points by LawnGnome | 132 comments
Blog post by Josh Bressers on Open Source Security arguing that many open source projects are maintained by a single person.
362 points by 8organicbits | 72 comments
A personal blog post explaining how the author uses Git's includeIf directive to manage separate Git identities and signing keys per directory.
386 points by not_a_boat | 48 comments
Blog post from build-your-own.org arguing complex software like databases can be learned by building a small version, introducing a 3000-line, zero-dependency database.
376 points by cdrnsf | 471 comments
A Codemanship blog post arguing that the future of software development still depends on human software developers.