A client's AI coding agent had contents:write on every repo in the org. When I asked who approved that, the answer was "the setup wizard." The defaults are the danger zone.
- Published On
ci cd
- GitHub Actions was out for nearly eleven hours on August 6. On the client project I was embedded in, it took about forty minutes for us to realize we had no Plan B. We couldn't deploy, couldn't run tests, couldn't merge with confidence. A ten-hour lesson in single points of failure.
- Published On
- A 47-minute build pipeline had become sacred infrastructure. When we finally opened it up, we found cargo-culted steps, redundant checks, and a team afraid of their own tooling.
- Published On
- How a 45-minute end-to-end test suite trained an entire team to ignore test failures — and what we did about it.
- Published On
Tags
consulting (80)debugging (34)architecture (31)developer-experience (24)reliability (20)devops (14)ai (12)performance (10)observability (9)code-quality (7)security (6)databases (6)microservices (6)postgres (6)engineering-culture (6)technical-debt (6)database (6)kubernetes (5)api-design (4)ci-cd (4)infrastructure (4)testing (4)productivity (4)dependencies (3)javascript (3)postgresql (3)tooling (3)on-call (2)distributed-systems (2)refactoring (2)configuration (2)resilience (2)cost-optimization (2)nodejs (2)code-review (2)deployment (2)opentelemetry (2)monitoring (2)goals (2)github-actions (1)data-integrity (1)retention (1)authentication (1)node.js (1)data (1)websockets (1)project-management (1)mcp (1)finops (1)multi-tenant (1)authorization (1)terraform (1)dns (1)opinion (1)memory (1)error-handling (1)secrets-management (1)webhooks (1)containers (1)environments (1)queues (1)cloud (1)orm (1)alerting (1)incident-management (1)typescript (1)caching (1)platform-engineering (1)feature-flags (1)api (1)contracts (1)logging (1)mongodb (1)migration (1)workflow (1)nestjs (1)angular (1)sandbox (1)sonarcube (1)learning (1)journey (1)mdx (1)