Non-default hardening flags for Docker/OCI image builds: BuildKit SBOM/provenance attestation, cosign/Sigstore signing, rootless-mode trade-offs, distroless CVE deltas with real numbers, and named supply-chain incidents ...
Non-default BuildKit build-security flags: secret mounts, SBOM/provenance attestations, distroless size/CVE numbers, and named Docker Hub supply-chain incidents (Leaky Vessels CVEs, JFrog imageless-repo campaign).
Sandi Metz's 'wrong abstraction' pattern, Kent C. Dodds's AHA alternative to DRY/WET, and the correctly-attributed Rule of Three, with the concrete failure signatures that tell you which side of the DRY tension you're ac...
Version-specific FastAPI/Pydantic v2 gotchas: verified current releases, yield-dependency cleanup timing, BackgroundTasks/middleware footguns, threadpool starvation, and Pydantic v2 union-resolution traps - with sources.
Cross-engine SQL guidance beyond textbook fundamentals: the GitLab 2017 backup-failure postmortem, why REPEATABLE READ silently permits write skew, sourced connection-pool sizing formulas, and SQL:2023's JSON type and pr...
Conventional commit standards, a comparison of trunk-based development, GitFlow, and GitHub Flow branching models, rebase versus merge trade-offs, commit signing, and monorepo versus polyrepo workflow guidance.
Complete reference for configuring and using Gitea Actions as a built-in CI/CD solution. Covers .gitea directory structure, workflow YAML syntax, runner setup, GITEA_TOKEN permissions, secrets, variables, scoped workflow...
Current idiomatic-vs-outdated verdicts for Go error handling (errors.AsType, errors.Join), concurrency (WaitGroup.Go, testing/synctest, errgroup), and context.Context - backed by named production goroutine-leak research ...
Concrete thresholds for adopting Ports & Adapters, named criticism of boilerplate-heavy misapplication, and how the pattern's testing payoff should be measured rather than assumed.
How to test across real system boundaries - databases, HTTP APIs, and message queues - using ephemeral test infrastructure (Testcontainers) and consumer-driven contract testing (Pact-style), with an honest accounting of ...