#ci-cd
18 posts tagged with #ci-cd
Every article below is hand-written, technically reviewed, and focused on ci-cd. Posts cover real-world architecture decisions, code-level implementation patterns, and trade-offs you'll only discover after shipping production systems.
Cybersecurity How to Build a Prompt Injection Scanner for RAG [2026]
A practical, reproducible way to scan retrieved RAG context for indirect prompt injection, benchmark false positives, and gate regressions in GitHub Actions without blocking your team all day.
Developer Tools AI Generated Code Quality [2026]: A 0–100 Audit Rubric + CI Gates
AI-generated code quality isn’t a style problem anymore. Here’s a practical 0–100 audit rubric (tests, security, maintainability, rewrite risk) plus CI gates that block hallucinated APIs before they ship.
Cybersecurity MCP Server Security Best Practices: Checklist + CI Linter [2026]
A practical MCP server security test plan: authn/authz models, tool allowlists, prompt-injection regression tests, rate limits, audit logs, and a CI-friendly permissions linter.
Developer Tools Bun lockfile bun.lockb format: Threat model + CI checks [2026]
bun.lockb made Bun installs fast, but it also changed how you audit dependency drift. Here’s what’s inside, what integrity it gives you, and how to enforce it in CI.
Developer Tools Rust Reproducible Builds + SBOM + Signed Artifacts [2026]
A 2026-ready Rust release pipeline: pin toolchains, make builds reproducible, gate deps with cargo-vet, generate SBOM + SLSA provenance, and sign everything with keyless cosign.
Developer Tools How to Build a Rust Version Bump Tool [2026 Tutorial]
Build a CI-safe Rust release toolchain: semver bump rules, workspace updates, changelog generation, annotated/signed git tags, and reproducible benchmarks.
Developer Tools 7 Safer Defaults for Code Review Automation (No AI) [2026]
Stop chasing AI review bots. Use formatting, linting, hooks, CODEOWNERS, and branch protections to cut review noise without lowering the bar.
Developer Tools How to Set Up a Python uv Workspace Monorepo [2026]
A copy-paste uv workspaces monorepo layout with one lockfile, editable local packages, CI that fails on drift, and fast installs via caching.
Cybersecurity How to Do Prompt Injection Regression Testing [2026 CI]
Your prompt-injection evals are probably overfit to cute synthetic prompts. Here’s a CI-ready regression suite that still catches indirect injection: seed corpora, adversarial transforms, canary secrets, and hard fail gates.
Developer Tools How to Upgrade to Go 1.27 in Production [Week-1 Checklist]
A pragmatic Go 1.27 upgrade playbook: toolchain pinning, CI matrix changes, perf validation (p99/allocs/GC), migration traps, and what to do with json/v2.
Developer Tools How to Set Up gitleaks + pre-commit + CI [2026]
A terminal-first, defense-in-depth secrets workflow for 2026: staged-only hooks, CI full-history scans, baselines for legacy repos, and sane allowlists.
Developer Tools How to Reduce Rust Compile Time [2026] (sccache + mold)
A measurable 2026 playbook to reduce Rust compile time: profile with Cargo timings, fix the build graph, get real sccache hit rates, and cut link time with mold.
![github pull request review laptop screen — illustration for article on Stacked PRs on GitHub [2026]:](https://img.kunalganglani.com/images/vzekdneq/production/3aec89cec8e78cab8275c7d1c8ceda0785938355-1200x675.webp?auto=format&fit=max&q=75&w=600)
Developer Tools Stacked PRs on GitHub [2026]: A Copy-Paste Workflow
A GitHub-native stacked PR workflow you can copy today: branch naming, dependent PR chains, reviewer hygiene, CI strategy, and a restack playbook when bases move.
AI and Machine Learning AI Engineering Evals: Regression Gates for Prompts, Tools, RAG [2026]
Stop letting prompt tweaks and model upgrades silently break production. Here’s a CI-style regression gate system for prompts, tool calling, and RAG with golden sets, schemas, shadow evals, and failure budgets.
Developer Tools TypeScript 7 Native Compiler Benchmark: My TS6 vs TS7 Recipe [2026]
A reproducible TypeScript 7 native compiler benchmark harness (clean vs incremental, emit vs noEmit) plus a migration checklist for monorepos, path aliases, and CI caching.
Developer Tools AI Code Review in Your CI/CD Pipeline: 2026 Setup
Every vendor shipped a 2026 'best tools' listicle. None shipped the YAML. Here's a complete, copy-pasteable GitHub Actions config that wires AI code review into your pipeline — triggers, secrets, cost caps, and a real merge gate.
Developer Tools GitHub Actions vs CircleCI 2026: Which CI/CD Pipeline Wins?
I'd pick GitHub Actions for solo devs and GitHub-native teams who want zero-friction setup; I'd pick CircleCI for performance-obsessed teams who need faster parallelism and fine-grained resource control. The split isn't about features — it's about where your bottleneck actually lives.
Developer Tools uv vs pip in 2026: Which Python Package Manager Actually Wins?
I'd pick uv for any team running CI pipelines, ML workloads, or fresh projects where cold-install speed and lockfiles matter. I'd stick with pip for legacy codebases or anywhere a zero-dependency, universally-supported tool beats raw performance.