A workflow job building documentation on every push to every branch, publishing nothing except on the default branch. A conditional inside a job means the job still starts,…
A build tool in JavaScript inside a PHP repository, examined for whether it should be rewritten and left alone. A tool written in the language of the artefacts…
A pull-through cache with no garbage collection schedule, and a disk that filled at two in the morning. A cache grows without bound by definition and the only…
Scanning at build time answers whether the image was vulnerable when it was built, which is not the question anybody asks. A vulnerability disclosed after a build is…
A plan output that had grown to four hundred lines for a two-resource change, mostly from a provider that reports every computed attribute. The JSON plan has been…
A third consecutive annual major, each cheaper than the last, which is what doing the first one properly buys. The cost of an annual major is almost entirely…