Jjudeinsoit-ai.hashnode.dev·2d ago · 18 min readThree signed v1.0.0 images, one release: what attestation actually provesThe four questions, and the one nobody asks Pulling a container image somebody else built asks four separate questions. Most people answer three of them and skip the fourth: Step Question it answer00
COCelestina Odiliintinatech.hashnode.dev·4d ago · 9 min readBuilding a Secure CI/CD Pipeline with GitHub Actions for a Microservices E-Commerce MarketplaceIntroduction Modern applications often consist of multiple services that need to be built, tested, and deployed consistently. Doing this manually can lead to inconsistent environments, deployment erro00
SASamuel Adekunleintechwithsam.hashnode.dev·6d ago · 8 min readAutomate Flutter Releases with Shorebird + GitHub Actions (Skip App Store Review)A real pain point for mobile apps is waiting days or weeks for App Store and Play Store reviews whenever you need to ship a fix or a small update to users. That exact problem is what we are solving 00
SHSanskriti Harmukhinvultr.hashnode.dev·Sep 9 · 12 min readAutomating CI/CD Pipelines for Cypress Testing with GitHub ActionsContinuous Integration and Continuous Deployment (CI/CD) pipelines streamline software development by automating code integration, testing, and deployment, and incorporating end-to-end (E2E) testing e00
Sspongeb0binbobtaylor.hashnode.dev·Sep 9 · 11 min readHow to Add Python Duplicate-Code Detection to GitHub ActionsDuplicate code is easiest to deal with before it becomes part of the codebase. That makes duplicate-code detection a natural CI check: run the same rules on every pull request, give developers a way t00
SDSuman Debnathinsumandebnath.hashnode.dev·Sep 7 · 15 min readThe AI agent cost guides say $200 a month. Mine has cost $5.In short — MIGI is a fleet of AI agents built by Suman Debnath, running since 8 July 2026 at forty to fifty agent runs a day. It has cost under five dollars in total, against published estimates of $124MA
JTJAY TANKinjaytank.hashnode.dev·Sep 8 · 9 min read GitHub Actions Security: The CI/CD Attack Surface You're Probably Not AuditingMost teams treat their .github/workflows directory as plumbing. It gets written once, copied between repos, and forgotten. But that YAML is executable code with access to your repository, your secrets00
HRHritik ranjaninblogs.hritikranjan.in·Sep 6 · 36 min read🚀 Git & GitHub for DevOps: Complete Beginner's Guide with Commands, Branching, Git Hooks & GitHub ActionsAlmost every modern DevOps workflow starts with source code. Developers write code → Git tracks the changes → GitHub stores and collaborates on the code → CI/CD tools test and deploy it. A simple DevO21I
LBLalit Baggainblog.lalitbagga.com·Sep 3 · 7 min readArgo CD Fixed My Drift, Then Deployed My Bad ReleaseThis project started with a simple goal: run Kubernetes without keeping an EKS cluster online every day. In I Wanted Kubernetes Without an Always-On EKS Bill, I built an always-on k3s lab on my home s00
Ccrimsondhaksinhelgafinn.hashnode.dev·Sep 2 · 6 min readPinning GitHub Actions to a SHA is not protectionIn March 2025 an attacker compromised tj-actions/changed-files and rewrote its release tags to point at malicious code. The injected code dumped runner memory into workflow logs, which on a public rep00
