2 pages

Debugging

The secret that wasn't on my branch

My CI went red on a secret I’d never committed. Not a close call, not a near-miss I’d half-forgotten about. gitleaks, the secret scanner, failed a merge request of mine on a private key that was not on my branch, was not …

The cobra hook I was sure I'd enabled

It came out of an audit. I’d recently pointed a small army of review agents at the whole go-tool-base codebase, back before that became a political problem, and one of the findings was that a subcommand could quietly …