GitHub Actions is a popular automation platform for software development workflows, but using third-party actions can come with security risks. Many organizations fail to properly manage build permissions, which can lead to potential vulnerabilities... read more  

GitHub is frequently used by attackers to host their payloads or exfiltrate data while remaining hidden. It's important to detect and monitor the use of GitHub APIs, GitHub Codespaces, and the hosting of malware on the platform to protect against these threats... read more  

APIs have been around for decades, but it wasn't until the early 2000s that they became prominent thanks to companies like eBay, Salesforce, and Amazon. Today, APIs are essential for software development, and the majority of enterprises are focused on easier consumption and management of APIs... read more  

The article discusses the importance of addressing database performance issues and suggests that before jumping to more complex solutions, it is beneficial to first optimize the existing system. The author provides an example of how their team was able to reduce CPU usage on their overloaded Postgre.. read more  

AWS AppSync now supports JavaScript for unit resolvers, allowing developers to handle single data source access patterns with ease. AppSync also provides NPM libraries for local development and an evaluate-code API command for testing business logic, with support available in all AWS regions... read more  

WebSockets are a cool and impressive part of modern applications, but man they can be hard to implement... read more  

A llama typing on a keyboard by stability-ai/sdxl. Prompting large language models like Llama 2 is an art and a science. In post covers everything learned by the author while exploring Llama 2, including how to format chat prompts, when to use which Llama variant, when to use ChatGPT over Llama, how.. read more  

New research shows that ChatGPT, powered by the GPT-4 AI engine, scored in the top 1% in creativity tests, surpassing most college students and suggesting that AI is capable of matching or even surpassing human creative abilities. The findings, based on the Torrance Tests of Creative Thinking, demon.. read more  

On August 10, 2023, HashiCorp announced that they were switching Terraform from an open source license to a non open source license. This move to the non open source license called BSL threatens the Terraform community and ecosystem, leading to potential loss for everyone involved... read more  

How 37signals' team uses Prometheus to ingest, store, and alert based on metrics... read more