Extend your dependency information in the GitHub Dependency Graph with new GitHub Actions
New Actions from Anchore, NowSecure, SBT, and Trivy are now available to create a more comprehensive GitHub Dependency Graph.
How the GitHub Security Team uses projects and GitHub Actions for planning, tracking, and more
Can projects and GitHub Actions be used by your non-developer teams? They absolutely can. Check out how our Security Team uses GitHub to run the department effortlessly.
Software Visualization — Challenge, Accepted
TL;DR Architectural diagrams are the bread and butter of software design and a foundational tool for communication and collaboration on software development. At Spotify, we have an incredibly complex network of thousands of interlinked software systems owned by hundreds of teams, so having a simple way to visualize these connections is essential. While capturing all of our software in one large di
What it Took to Scale Spotify’s Marketing Efforts
At Spotify, we’ve tried to uphold the tradition of running one major holiday marketing campaign at the end of each year. The campaigns typically run on various platforms such as the Spotify Homepage and the Premium page.
Managed Transforms: templated HTTP header modifications
Customize multiple HTTP headers with a single click using Cloudflare Managed Transforms
Digital design is now a real job
The next decade of design jobs just got an upgrade.
Write Better Commits, Build Better Projects
High-quality Git commits are the key to a maintainable and collaborative open- or closed-source project. Learn strategies to improve and use commits to streamline your development process.
What to do when your open source project becomes a community?
Maintainers answer your questions about how to manage an open source project that grows into a community.
Announcing the summer 2022 MLH Fellowship GitHub Contributors
Meet the 2022 MLH Fellowship cohort! This 12-week internship alternative is for aspiring software engineers, and powered by GitHub.
How to Build Trust as a New Manager in a Fully Remote Team - Shopify
A 90-day plan to help managers develop a way of working remotely and gain mastery over the tools and skills that build trust in the new environment.
Jump Into July (2022 Desktop Wallpapers Edition) — Smashing Magazine
Let’s welcome the new month with some inspiring desktop wallpapers. Created by artists and designers from across the globe, they come in versions with and without a calendar for July 2022. You can click on every image to see a larger preview. We respect and carefully consider the ideas and motivation behind each and every artist’s work. This is why we give all artists the full freedom to explore t
Live-patching security vulnerabilities inside the Linux kernel with eBPF Linux Security Module
Learn how to patch Linux security vulnerabilities without rebooting the hardware and how to tighten the security of your Linux operating system with eBPF Linux Security Module
Internet Explorer, we hardly knew ye
With the recent retirement of Microsoft Internet Explorer 11, we analyzed Internet Explorer traffic trends. Breaking the traffic down by bot score revealed much of this traffic is “likely automated”
Transaction anomalies with SELECT FOR UPDATE
This article shows how surprising transaction anomalies can happen with SELECT FOR UPDATE and what you can to to avoid them.
The Chromium super (inline cache) type confusion
In this post I’ll exploit CVE-2022-1134, a type confusion in Chrome that I reported in March 2022, which allows remote code execution (RCE) in the renderer sandbox of Chrome by a single visit to a malicious site. I’ll also look at some past vulnerabilities of this type and some implementation details of inline cache in V8, the JavaScript engine of Chrome.
Improve Git monorepo performance with a file system monitor
Monorepo performance can suffer due to the sheer number of files in your working directory. Git’s new builtin file system monitor makes it easy to speed up monorepo performance.
Navigating Recurring Payments in India: A Backend Perspective - Shopify
To address the new RBI framework for recurring payments in Shopify’s billing platform, we worked with a local payment provider that could accommodate both card-based payments as well as a local payment method called Unified Payments Interface (UPI).
Hertzbleed explained
Hertzbleed is a brand-new family of side-channel attacks that monitors changes on CPU frequency
Help Shape the Future of CSS-Tricks!
Head's up! The survey closed on July 12, 2022. We got tons of responses — thanks to everyone for helping us out!
What’s new in Figma: June 2022
A round-up of updates and improvements to Figma and FigJam
Improving Git protocol security on GitHub Enterprise Server
The recent changes to improve protocol security on GitHub.com are now coming to GitHub Enterprise Server, starting with version 3.6.
Notes on running containers with bubblewrap
Notes on running containers with bubblewrap
Remote Development at Slack
In this article, “remote development environments” refer to AWS EC2 instances where engineers make code changes and can see a running Slack application with those changes. For years, engineers at Slack isolated and tested their changes by running microcosms of the Slack application on their local computers. This was difficult for many reasons: it involved…
Smashing Podcast Episode 48 With Stephanie Eckles: Is Sass Still Relevant? — Smashing Magazine
In this episode, we ask if Sass is still relevant in 2022 and if it adds any value modern CSS workflows. Vitaly talks to expert Stephanie Eckles to find out.
