What we've been writing
Docker-like Layer Caching on VMs
Layer caching is one of the best features of building Docker images. Can the same technique be used when executing commands in VMs for CI builds?
GitHub Actions is Vulnerable to Supply Chain Attacks
One of the most surprising things about the design for GitHub Actions is that it’s vulnerable to supply chain attacks. Most workflows do not have their actions locked to a specific revision.
Rewriting Git History with Signed Commits
When we prepared the open source release of ABQ and the open source release of Captain, we decided to rewrite our git history. The script to rewrite the commit history was fairly straightforward, but our team members have commit signature verification enabled, which posed a challenge. To ensure that we produced verified commits, we needed each person on our team to rewrite their respective commits. We ended up writing a multiplayer git history rewrite script, including signed commits.