Sylwit
@sylwit.com
Tech savvy who likes to learn and share. Talking about #AWS, cloud, dev, security etc...
Are you using this popular github action tj-actions/changed-files ? A malware was introduced yesterday. Rotate your secrets semgrep.dev/blog/2025/po... #security
Semgrep | 🚨 Popular GitHub Action tj-actions/changed-files is compromised
Popular GitHub Action tj-actions/changed-files has been compromised with a payload that appears to attempt to dump secrets, impacting thousands of CI pipelines.
semgrep.dev
March 16, 2025 at 3:39 AM
Are you using this popular github action tj-actions/changed-files ? A malware was introduced yesterday. Rotate your secrets semgrep.dev/blog/2025/po... #security
Ever used #aws chime ? It is now deprecated. Honestly even with aws support we were switching to meet. I'm not sure this service was really used outside of aws. aws-news.com/article/0195...
Update on Support for Amazon Chime
AWS is discontinuing Amazon Chime communication service, with support ending on February 20, 2026, and recommending customers transition to alternative collabo...
aws-news.com
February 20, 2025 at 12:23 AM
Ever used #aws chime ? It is now deprecated. Honestly even with aws support we were switching to meet. I'm not sure this service was really used outside of aws. aws-news.com/article/0195...
Reposted by Sylwit
Mentee applications are now open for the next #LFX Mentorship term. Applications are open until Tuesday Feb 18! You won't want to miss this. Start you #OpenSource #career
mentoring/programs/lfx-mentorship/2025/01-Mar-May at main · cncf/mentoring
👩🏿🎓👨🏽🎓👩🏻🎓CNCF Mentoring + CommunityBridge + Summer of Code - cncf/mentoring
hubs.ly
February 15, 2025 at 4:00 AM
Mentee applications are now open for the next #LFX Mentorship term. Applications are open until Tuesday Feb 18! You won't want to miss this. Start you #OpenSource #career
#github is still missing an easy way to delete all runs of a workflow so here is a one liner
`gh run list --workflow my-workflow.yaml --json databaseId -q '.[].databaseId' | xargs -I{} gh run delete {}`
`gh run list --workflow my-workflow.yaml --json databaseId -q '.[].databaseId' | xargs -I{} gh run delete {}`
February 14, 2025 at 3:56 PM
#github is still missing an easy way to delete all runs of a workflow so here is a one liner
`gh run list --workflow my-workflow.yaml --json databaseId -q '.[].databaseId' | xargs -I{} gh run delete {}`
`gh run list --workflow my-workflow.yaml --json databaseId -q '.[].databaseId' | xargs -I{} gh run delete {}`
Reposted by Sylwit
February 11, 2025 at 6:52 PM
Do you want to know if some #aws services you use will be deprecated? Here is a nice repo that tracks them github.com/SummitRoute/...
GitHub - SummitRoute/aws_breaking_changes: List of changes announced for AWS that may break existing code
List of changes announced for AWS that may break existing code - SummitRoute/aws_breaking_changes
github.com
February 12, 2025 at 1:03 AM
Do you want to know if some #aws services you use will be deprecated? Here is a nice repo that tracks them github.com/SummitRoute/...
To promote your #opensource project I would recommend to have a repo that immediately explains what problem it is solving. Then something you can just clone and run, have a clear doc and then promote it on social media, blogs etc...
Read more on all these tips over on the blog
github.blog/open-source/...
github.blog/open-source/...
5 tips for promoting your open source project
Three open source experts offer their advice on sharing open source projects with the world.
github.blog
February 10, 2025 at 9:28 PM
To promote your #opensource project I would recommend to have a repo that immediately explains what problem it is solving. Then something you can just clone and run, have a clear doc and then promote it on social media, blogs etc...
#aws recommend to disable s3 SSE-C encryption if you don't need it. aws.amazon.com/blogs/securi... #security #cloud
Preventing unintended encryption of Amazon S3 objects | Amazon Web Services
January 17, 2025: We updated this post to highlight the importance of using short-term credentials to mitigate the risk of unauthorized techniques such as the one detailed in this blog. At Amazon Web ...
aws.amazon.com
February 8, 2025 at 10:24 PM
#aws recommend to disable s3 SSE-C encryption if you don't need it. aws.amazon.com/blogs/securi... #security #cloud
A convenient resource time_sleep to deal with inconsistency in #terraform or #opentofu. When you create a github_repo and you want to add some rulesets, the repo isn't immediately accessible. Same goes for #S3 buckets. registry.terraform.io/providers/ha... #IaC
Terraform Registry
registry.terraform.io
February 8, 2025 at 8:19 PM
A convenient resource time_sleep to deal with inconsistency in #terraform or #opentofu. When you create a github_repo and you want to add some rulesets, the repo isn't immediately accessible. Same goes for #S3 buckets. registry.terraform.io/providers/ha... #IaC
Can't wait to see it available for private repos. @github.com any ETA for that ?
ICYMI: Linux arm64 hosted runners are available in preview in public repositories 🙌 Build, test, and deploy entirely within arm64 architecture.
github.blog/changelog/20...
github.blog/changelog/20...
Linux arm64 hosted runners now available for free in public repositories (Public Preview) · GitHub Changelog
Linux arm64 hosted runners now available for free in public repositories (Public Preview)
github.blog
February 6, 2025 at 12:05 AM
Can't wait to see it available for private repos. @github.com any ETA for that ?
If you want to improve #github action or #circleci, here are 2 userscripts that will display the total time charged for each workflow sylwit.medium.com/enhance-job-...
Enhance Job Duration Tracking in CircleCI and GitHub Actions
When working with CI/CD tools like CircleCI and GitHub Actions, you might have noticed that the reported total duration of a pipeline isn’t…
sylwit.medium.com
February 5, 2025 at 1:12 AM
If you want to improve #github action or #circleci, here are 2 userscripts that will display the total time charged for each workflow sylwit.medium.com/enhance-job-...
Reposted by Sylwit
When we say we wrote the book on observability, we mean it. Download "Honeycomb’s O’Reilly Book: Observability Engineering," today to uplevel your understanding of observability! info.honeycomb.io/observabilit...
January 31, 2025 at 7:05 PM
When we say we wrote the book on observability, we mean it. Download "Honeycomb’s O’Reilly Book: Observability Engineering," today to uplevel your understanding of observability! info.honeycomb.io/observabilit...
Reposted by Sylwit
Explore the top Terraform and OpenTofu tools for 2025 to simplify infrastructure management, improve collaboration, boost security, and optimize workflows.
#devops
#devops
These Terraform/OpenTofu Tools Promise to Manage Your Infrastructure Tasks Effectively
hackernoon.com
February 3, 2025 at 5:07 PM
Explore the top Terraform and OpenTofu tools for 2025 to simplify infrastructure management, improve collaboration, boost security, and optimize workflows.
#devops
#devops
I don't really get why the default of #ECR pull through cache is to create repo on the fly. This doesn't work well with iac and it's also a security risk. I never add the ecr:CreateRepository policy out of the role used by #terraform docs.aws.amazon.com/AmazonECR/la... #aws
Sync an upstream registry with an Amazon ECR private registry - Amazon ECRSync an upstream registry with an Amazon ECR private registry - Amazon ECR
You can sync the contents of an upstream registry with your Amazon ECR private registry.
docs.aws.amazon.com
February 1, 2025 at 2:27 AM
I don't really get why the default of #ECR pull through cache is to create repo on the fly. This doesn't work well with iac and it's also a security risk. I never add the ecr:CreateRepository policy out of the role used by #terraform docs.aws.amazon.com/AmazonECR/la... #aws
#deepseek database on #clickhouse publicly exposed. I love the exposure walkthrough.
www.wiz.io/blog/wiz-res...
www.wiz.io/blog/wiz-res...
Wiz Research Uncovers Exposed DeepSeek Database Leaking Sensitive Information, Including Chat History | Wiz Blog
A publicly accessible database belonging to DeepSeek allowed full control over database operations, including the ability to access internal data. The exposure includes over a million lines of log str...
www.wiz.io
January 30, 2025 at 2:30 AM
#deepseek database on #clickhouse publicly exposed. I love the exposure walkthrough.
www.wiz.io/blog/wiz-res...
www.wiz.io/blog/wiz-res...
Great tip from @abjoerne.bsky.social #listentotheheroes
About AWS ARNs and your infra as code: This is good: "arn:aws:ec2:${AWS::Region}..." Even better is to use "arn:${AWS::Partition}:ec2...." . AWS EU-cloud is coming soon as a separate partition, you might want to be able to deploy there also! go.aws/4gxNORz #listentotheheroes
AWS Digital Sovereignty Pledge: Announcing a new, independent sovereign cloud in Europe | Amazon Web Services
French | German | Italian | Spanish From day one, Amazon Web Services (AWS) has always believed it is essential that customers have control over their data, and choices for how they secure and manage ...
aws.amazon.com
January 29, 2025 at 3:56 PM
Great tip from @abjoerne.bsky.social #listentotheheroes
Work on open source projects that you use, check the open issues, understand the code, make some PR.
What tips would you give to someone wanting to get into open source?
Here are ours👇
github.blog/open-source/...
Here are ours👇
github.blog/open-source/...
New to open source? Here’s everything you need to get started
Explore our simple guide to finding projects, understanding guidelines, and making an impact.
github.blog
January 28, 2025 at 8:37 PM
Work on open source projects that you use, check the open issues, understand the code, make some PR.
Reposted by Sylwit
Git 2.48 is here ✨
github.blog/open-source/...
github.blog/open-source/...
Highlights from Git 2.48
The open source Git project just released Git 2.48. Here is GitHub's look at some of the most interesting features and changes introduced since last time.
github.blog
January 27, 2025 at 10:42 PM
Git 2.48 is here ✨
github.blog/open-source/...
github.blog/open-source/...
Impressive
Here we explain how we made our data pipeline scale to 700 million events per second while becoming more resilient than ever before. blog.cloudflare.com/how-we-make-...
Over 700 million events/second: How we make sense of too much data
Here we explain how we made our data pipeline scale to 700 million events per second while becoming more resilient than ever before. We share some math behind our approach and some of the designs of o...
blog.cloudflare.com
January 27, 2025 at 6:32 PM
Impressive
I never used #github template repo before and I'm looking to introduce them at work. docs.github.com/en/repositor...
I've used cookie cutter in the past but I think the hardest part is to find the right balance between adding only what's useful and common and having many tailored templates.
I've used cookie cutter in the past but I think the hardest part is to find the right balance between adding only what's useful and common and having many tailored templates.
Creating a repository from a template - GitHub Docs
You can generate a new repository with the same directory structure and files as an existing repository.
docs.github.com
January 26, 2025 at 7:39 PM
I never used #github template repo before and I'm looking to introduce them at work. docs.github.com/en/repositor...
I've used cookie cutter in the past but I think the hardest part is to find the right balance between adding only what's useful and common and having many tailored templates.
I've used cookie cutter in the past but I think the hardest part is to find the right balance between adding only what's useful and common and having many tailored templates.
Reposted by Sylwit
Interesting article by @gergely.pragmaticengineer.com and @hejelin.bsky.social about the evolution of Bluesky's architecture
#atprotodev #atdev
newsletter.pragmaticengineer.com/p/bluesky
#atprotodev #atdev
newsletter.pragmaticengineer.com/p/bluesky
Building Bluesky: a Distributed Social Network (Real-World Engineering Challenges)
Bluesky is built by around 10 engineers, and has amassed 5 million users since publicly launching in February this year. A deep dive into novel design decisions, moving off AWS, and more.
newsletter.pragmaticengineer.com
January 25, 2025 at 6:42 PM
Interesting article by @gergely.pragmaticengineer.com and @hejelin.bsky.social about the evolution of Bluesky's architecture
#atprotodev #atdev
newsletter.pragmaticengineer.com/p/bluesky
#atprotodev #atdev
newsletter.pragmaticengineer.com/p/bluesky
#circleci has updated their diagram class, so I updated my sum actions userscript gist.github.com/sylwit/eece2...
My post on how to use it with the #Github-Actions version too sylwit.medium.com/enhance-job-...
My post on how to use it with the #Github-Actions version too sylwit.medium.com/enhance-job-...
gist.github.com
January 25, 2025 at 7:51 PM
#circleci has updated their diagram class, so I updated my sum actions userscript gist.github.com/sylwit/eece2...
My post on how to use it with the #Github-Actions version too sylwit.medium.com/enhance-job-...
My post on how to use it with the #Github-Actions version too sylwit.medium.com/enhance-job-...
Reposted by Sylwit
🎙️ Blue-Green Deployment for Databases?
This week, we explore its evolution, benefits, and challenges for blue-Green deployments of stateful systems like RDS. 🚀
🎧 Listen here: developers.podcast.g...
⏱️ 50 min
#AWS #Databases #BlueGreen
This week, we explore its evolution, benefits, and challenges for blue-Green deployments of stateful systems like RDS. 🚀
🎧 Listen here: developers.podcast.g...
⏱️ 50 min
#AWS #Databases #BlueGreen
January 24, 2025 at 2:34 PM
🎙️ Blue-Green Deployment for Databases?
This week, we explore its evolution, benefits, and challenges for blue-Green deployments of stateful systems like RDS. 🚀
🎧 Listen here: developers.podcast.g...
⏱️ 50 min
#AWS #Databases #BlueGreen
This week, we explore its evolution, benefits, and challenges for blue-Green deployments of stateful systems like RDS. 🚀
🎧 Listen here: developers.podcast.g...
⏱️ 50 min
#AWS #Databases #BlueGreen