Join us

ContentUpdates and recent posts about Pulumi..
Link
@varbear shared a link, 4 weeks, 1 day ago
FAUN.dev()

How to steal npm publish tokens by opening GitHub issues

Attackers pushed a poisonedcline@2.3.0to npm using a stolen publish token. ItspostinstallinstalledOpenClawglobally. An AI triage bot let a malicious issue title trickClaudeinto running commands on a GitHub Actions runner. It wrote a poisonedactions/cacheentry. The nightly release restored the poison.. read more  

Link
@kaptain shared a link, 4 weeks, 1 day ago
FAUN.dev()

Why I stopped using NixOS and went back to Arch Linux

After a year onNixOS, the author reverted toArch Linux. They blamed frequent breakage, rebuild loops, and unpredictable regressions after updates. They flaggedNixOS's reproducible config,isolated builds, and multi-generation installs. These swell disk use, force wideglibcrebuilds, and make updates s.. read more  

Link
@kaptain shared a link, 4 weeks, 1 day ago
FAUN.dev()

Announcing the AI Gateway Working Group

Kubernetes launched theAI Gateway Working Group. It will add standards and declarative APIs to make networking play nice with AI workloads and extend theGateway API. Active proposals attack two gaps.Payload processinginspects and transforms full HTTP payloads using declarative configs, ordered pipel.. read more  

Link
@kaptain shared a link, 4 weeks, 1 day ago
FAUN.dev()

Podman fixed every problem I had with Docker, and I switched in an afternoon

Author swappedDockerforPodman. The swap revealed CLI parity and minor networking and volume tweaks. Podmaneschews a centraldaemon. It runs containers as system processes and defaults torootlessviauser namespaces. That cuts privilege exposure and trims baseline overhead... read more  

Podman fixed every problem I had with Docker, and I switched in an afternoon
Link
@kaptain shared a link, 4 weeks, 1 day ago
FAUN.dev()

When Kubernetes Is the Wrong Default

The guide mapsteam size,workload shape, andtime-to-valueto three tiers:managed platforms,VMs, andKubernetes. It calls outKubernetesbluntly: expect a 1–3 month delay to production. Expect ongoing consumption of 30–50% of one engineer. It only pays off for multi-region setups, complex networking, or t.. read more  

When Kubernetes Is the Wrong Default
Link
@kala shared a link, 4 weeks, 1 day ago
FAUN.dev()

I Will Never Use AI to Code (or write)

This article discusses the negative impacts of relying on AI for coding and skill development. The cycle of using AI leading to skill decay, skill collapse, and the end of capability is highlighted as a major concern. The economic implications of AI usage in various industries and the lack of profit.. read more  

Link
@kala shared a link, 4 weeks, 1 day ago
FAUN.dev()

Claude now creates interactive charts, diagrams and visualizations

Claude (beta) renders inline, temporary charts, diagrams, and visualizations in chat viaClaude Visual Composer. Visuals stay editable on request. Enabled by default. Claude can opt to generate visuals or follow direct prompts. Integrates withFigma,Canva, andSlack... read more  

Claude now creates interactive charts, diagrams and visualizations
Link
@kala shared a link, 4 weeks, 1 day ago
FAUN.dev()

How AI Agents Automate CVE Vulnerability Research

A multi-agent system runs onGoogle's Agent Development Kit (ADK). It orchestrates specialized AI models for CVE research and report synthesis. It runso4-mini-deep-researchwith web search. On timeouts it falls back toGPT‑5. It extracts structured technical requirements. It maps those requirements to .. read more  

How AI Agents Automate CVE Vulnerability Research
Link
@kala shared a link, 4 weeks, 1 day ago
FAUN.dev()

Agentic payments are coming. Is your company ready?

Google'sChromeadded native support forUniversal Commerce Protocol (UCP). That letsGeminiagents execute agentic payments and pause for user confirmation. Merchants and platforms such asPayPal,Amazon Rufus, andHome Depotran agentic commerce pilots.PayPalimplementedUCPsupport. Agent scraping and protoc.. read more  

Agentic payments are coming. Is your company ready?
Link
@devopslinks shared a link, 4 weeks, 2 days ago
FAUN.dev()

Top 10 best practices for Amazon EMR Serverless

Amazon EMR Serverless allows users to run big data analytics frameworks without managing clusters, integrating with various AWS services for a comprehensive solution. The top 10 best practices for optimizing EMR Serverless workloads focus on performance, cost, and scalability, including consideratio.. read more  

Top 10 best practices for Amazon EMR Serverless
Pulumi is an open-source infrastructure-as-code platform that allows you to define, deploy, and manage cloud resources using familiar general-purpose programming languages like Python, JavaScript, Go, and TypeScript.

Pulumi represents a major shift in the Infrastructure-as-Code (IaC) landscape by moving away from proprietary domain-specific languages (DSLs) and static configuration files like YAML or JSON. Instead, it leverages the power of standard programming languages, allowing engineers to use loops, functions, classes, and existing package managers to define their cloud environments. This means you can apply software engineering best practices—such as unit testing, modularity, and CI/CD integration—directly to your infrastructure setups on providers like AWS, Azure, Google Cloud, and Kubernetes.

The platform works by utilizing a "State" mechanism similar to Terraform, where it tracks the current deployment against your desired code. When you run a Pulumi program, it builds a resource graph to determine the most efficient way to provision or update your services. Because it uses real code, it provides superior IDE support, including auto-completion and type-checking, which significantly reduces the syntax errors and "trial-and-error" deployments common with text-based configuration tools.

Furthermore, Pulumi excels in hybrid and multi-cloud environments by providing a unified workflow for both infrastructure and application delivery. It bridges the gap between developers and platform engineers, as both can now speak the same language—literally.