Ok, but as developer, does really matter that Mythos apocalyptic alarm? Is there an intelligent SAST? Yes, the intelligent SAST version you are looking for exists and is native to the Semgrep ecosystem. It is called Semgrep Assistant, which runs on top of the Semgrep AppSec Platform. Recently, Semgrep also introduced Semgrep Workflows, allowing you […]
Category: Software
Programmable User Experience
I want to focus on levels of control, distance of control, effectiveness of control, reliability of a UI/UX. On one side there are receipt for rigidity: framework like next.js, SSR. On another side there is an old receipt for “configurability”. I do not agree with none of both. Let’s take as example the mobility means: […]
Skipping The Broker (and Orchestrator logs)
Since the good weather is coming again, I started doing some sport, I got tanned, and trying to quit drugs that I used to deal around acting as a broker. Unfortunately higher level complain about no well distributed, local crews used to fight each other aggregate and … No, not that movie. That’s just work […]
SSL Termination vs SSL Passthrough: balance between performance and easy management
Depending on management cost and user experience requirements, it might be more sensible to configure internal service as https or as http. I give example of 2 backend exposing NodePort on Kubernetes, just to keep proxy concern clearly separated. SSL Termination at the Proxy (HTTP Mode) Concept HAProxy Example (HTTP/2 Termination) Notes: NGINX Example (HTTP/2 […]
How to deal with change management: plan and actions
One of the most important strategy asset in a IT company is the ability to deal with changes.
In Software World everything changes, and it changes quickly: market, customer expectation, third party software.
Being a technician and working on IT, I mostly focused on customer expectation (in term of UI/UX), and software changes (in term of service provided) […]
My latest LLM code nightmare
Customer needs to automate code statical analysis into the integration workflow using a SAST tool. The detailed task specification comes from ChatGPT, suggesting semgrep ran from a docker image semgrep/semgrep. I thought it wasn’t a bad idea. ChatGPT suggested to integrate the tool as a pre-commit git hook, that is fair for local development, but […]
The tale of Jenkins update to Java Jdk21 and Matrix Auth plugin
I passed a long day dealing with Jenkins runtime update (from jdk17 to jdk21), and authorisation plugin (Matrix Auth) stopping to work. Here is the tale. Involved system: Error log messages was related to hudson, and to matrix, and to authorization: Caused: jenkins.util.xstream.CriticalXStreamException: [LF]> —- Debugging information —-[LF]> cause-exception : com.thoughtworks.xstream.mapper.CannotResolveClassException[LF]> cause-message : hudson.security.GlobalMatrixAuthorizationStrategy[LF]> class […]
Easy Web Application Development with AWS Cognito and S3
General direction for developing a complex Web Application was to: Thanks to AWS Cognito, S3 buckets, and Lambda, all those complexity is simplified. And one can pay as it goes: if the service has value for the user, then more lambda fuel must be filled. What in this AWS solution: Read more on AWS Service […]
Dealing with new .kube/config
Video: https://youtu.be/oBF-dUXZwrA Once you get a new config from a remote kubernetes installation you need to integrate it to existing local .kube/config file. Sometime, you or others, are doing experiments with kubernetes, so repeat the .kube/config integration steps over and over again, dealing with -data blobs List of ingredients Getting the scripts Retrieve the scripts […]
How to expose ssh over https
By the mean of a reverse proxy installed on a Proxmox machine, is possible to expose also ssh access to the single machine. List of ingredients Preparing The Server To generate an self signed certificate, use the command: In /etc/nginx/nginx.conf add these lines: Preparing The Client Copying minihost.crt in The Client from The Server by: […]