ci-cd – Page 17 – Türker Yıldırım

Static analysis on changed files in a hook

NoteOctober 21, 20201 min read

A full analysis on a large codebase takes long enough that nobody runs it before committing, so every finding arrives from CI after the context has been lost.…

Laravel 8 moved the models and rewrote the factories

Deep diveSeptember 29, 202010 min read

A directory move, a factory rewrite and a route resolution change that breaks silently. Which of the three actually needs doing, and in what order.

Secrets that are not in the repository and not in the image

Deep diveSeptember 29, 202010 min read

The database password was in the repository, then in the image, then in an environment variable readable by anything that could run ps. Where it went next.

Concurrency groups cancel the build nobody is waiting for

NoteSeptember 24, 20202 min read

Three pushes in ten minutes start three builds, and the first two are testing code that has already been superseded. Grouping on the ref rather than globally is…

Service containers give you MySQL without a compose file

NoteSeptember 21, 20202 min read

Integration tests need a real database, and a hosted runner is an empty machine — which is the problem service containers exist for. The health options are not…

set -euo pipefail, and the pipeline exit code you assumed

NoteSeptember 15, 20201 min read

A shell pipeline reports the exit code of the last command, so mysqldump | gzip > file succeeds when the dump fails and the gzip writes nothing. pipefail…

Run a Postman collection in CI with Newman

SnippetSeptember 14, 20201 min read

Auto-updates, and the site that changed underneath you

Deep diveAugust 6, 202010 min read

5.5 turns on plugin auto-updates per plugin, and a managed site is not a hobby site. A plugin updated at 03:00 and a checkout broken at 09:00.

Running mutation testing on the diff only

NoteAugust 6, 20201 min read

A full mutation run on a large codebase is hours, which means it runs nightly and nobody reads it. Running it on the changed lines takes minutes and…

Coverage of changed lines, not of the codebase

NoteJuly 28, 20201 min read

Total coverage moves so slowly that it says nothing about the change in front of you, and the question a reviewer has is whether the new code is…