ci-cd – Page 15 – Türker Yıldırım

A secret mount is not an ARG, and history proves it

NoteApril 16, 20212 min read

A build argument is recorded in the image history whether or not the build used it, so a token passed as an ARG is readable by anybody who…

Visual regression needs a stable font stack

NoteApril 13, 20212 min read

A screenshot comparison fails on a one-pixel difference, and font rendering differs between a laptop and a CI runner. Running the browser in a pinned container is the…

Wait for a compose service to be healthy before running tests

SnippetApril 12, 20211 min read

The staging environment that was lying

Deep diveApril 8, 202110 min read

It passed on staging four times and failed in production four times. The same code, a different outcome, and five differences nobody had enumerated.

A WordPress plugin with a test suite that runs in CI

Deep diveMarch 18, 202110 min read

A plugin on forty sites and no test that was not a person clicking. WordPress is a global, and the matrix is the actual value.

An OpenAPI document that is the test suite’s source of truth

Deep diveFebruary 23, 202110 min read

3.1 lands in February with real JSON Schema. Generating docs from code fixes half the problem; making the document the contract fixes the other half.

Vite in development and webpack in production is a real answer

Deep diveFebruary 9, 20218 min read

A 38-second dev server start on a machine with nothing else to do. Native ESM changes the feedback loop, and running two build tools has a specific cost.

A matrix with an exclude, for the one combination that fails

NoteFebruary 5, 20212 min read

A matrix of PHP versions against WordPress versions produces a grid, and two cells of it are combinations that were never supported. fail-fast: false is the setting that…

A PHPStan baseline that can only shrink

SnippetJanuary 8, 20211 min read

terraform plan output leaks secrets into the log

NoteJanuary 7, 20212 min read

A plan prints the values it intends to write, and a pipeline that posts the plan to a pull request posts them to anybody who can see the…