AKAmrendra kumarinmy-blog3.hashnode.dev路Jul 15 路 9 min readWhy Every React Project Needs an AGENTS.md File for Better AI CodingQuick Summary: AGENTS.md is a markdown file at your repository root that gives AI coding agents like Cursor, Claude Code, and Copilot persistent, project-specific context: build commands, code convent00
Vvenkatabhargav229inbhargav19.hashnode.dev路Jul 15 路 9 min readHow I Built a Self-Hosted AI Agent to Scan GitHub PRs for OWASP VulnerabilitiesThe Problem I Was Trying to Solve When developers push code changes, someone should review that code for security issues. Things like SQL injection, hardcoded passwords, or broken authentication logic00
PTPRANAV THAWAITinomnikon.hashnode.dev路Jul 10 路 4 min readCNTRL by Omnikon Org Selected for Elite Coders Summer of Code (ECSoC) 2026 馃殌CNTRL by Omnikon Org Selected for Elite Coders Summer of Code (ECSoC) 2026 馃殌 Open source has always been about collaboration, learning, and building software that creates real impact. Today, I'm thri00
AAtharvainatharva-nile.hashnode.dev路Jul 9 路 8 min readCI/CD Stress? Let GitHub Actions Handle ItI have came across wonderful thing across my internship, I know I am bit late to know about this but it鈥檚 okay to be late, but it鈥檚 never okay to stay unaware. I tried to bring my learning and underst10
PKPatrick Kearnsinfullstackcity.com路Jul 7 路 18 min readWhat If Your Pull Request Had a Blast Radius Score?Some pull requests look harmless until they reach production. Then someone notices the change touched authentication, a shared response contract, an EF Core migration, and one production config value 20
AHAkash Hadagali Persettiinakashpersetti.hashnode.dev路Jun 30 路 6 min readI stopped putting AWS keys in GitHub Secrets. Here's what I do instead.For a while my deploy pipelines all worked the same way. Generate an IAM user, copy its access key and secret into GitHub repo secrets, and let the workflow use them. It deploys fine. It also means a 00
MNMohit Nagarajinblog.kubeorch.dev路Jun 24 路 7 min readWhy I Stopped Using npm Tokens in GitHub ActionsI recently found out about npm's Trusted Publishers, and my immediate reaction was: wait, this is so much cooler than the token method. If you have ever published an npm package from GitHub Actions, y00
VTVladimir Ternovoyinqaboutique.hashnode.dev路Jun 20 路 6 min readWhy toast-only Playwright tests are not enoughAI-generated end-to-end tests often look useful at first glance. They click through a flow. They wait for something visible. They pass. But sometimes the entire assertion is basically this: await expe10
VTVladimir Ternovoyinqaboutique.hashnode.dev路Jun 19 路 4 min readI built a read-only GitHub Action to flag risky PRs before mergeMost CI checks answer questions like: Does the code compile? Do the tests pass? Does linting pass? Is formatting correct? Those checks are useful, but they often miss a different question: Did 10
BKBeautero KENNEinbopsbeautero.hashnode.dev路Jun 17 路 3 min readHow to Orchestrate Conflict-Free Dual Automatic Deployment with Vercel and GitHub Pages using GitHub ActionsHere is how you can set up a modern CI/CD (Continuous Integration / Continuous Deployment) pipeline capable of automatically deploying a frontend web application to two distinct production environment00