How AI enhances static application security testing (SAST)
Here’s how SAST tools combine generative AI with code scanning to help you deliver features faster and keep vulnerabilities out of code.

The post How AI enhances static application security testing (SAST) appeared first on The GitHub Blog. ⌘ Read more

Create a home for your community with GitHub Discussions
GitHub Community-in-a-box provides the tooling, resources, and knowledge you need to build internal communities of learning at scale with GitHub Discussions.

The post Create a home for your community with GitHub Discussions appeared first on The GitHub Blog. ⌘ Read more

LILYGO New T-Panel S3 Lite with 4” LCD and Wireless Connectivity
The T-Panel Lite by LILYGO is a compact ESP32S3-based development board designed for makers and hobbyists who are interested in creating IoT projects with a visual display component. This user-friendly tool provides a rich set of features packed into a small form factor with Arduino and MicroPython support. At the heart of the T-Panel Lite […] ⌘ Read more

Dream Setup
I love Daniel Bogan’s Uses This blog, even though it seems a bit Apple
heavy at times. People sharing what tools, both hardware and software,
that work for them is very helpful. A lot of things I never knew
about came from this or similar sites, or just people’s own home pages
copying Uses This’ questions and giving their own answers.

I love to see photos of people’s setup, like Reddit’s
/r/battlestations or the incredibly detailed interviews at … ⌘ Read more

How to Use the Latest GPT 4 & DALL-E 3 Free on iPhone & iPad with Copilot
GPT 4 is an extremely advanced large language model with immense AI capabilities, and DALL-E 3 is a wildly impressive AI image generator that creates pictures from text descriptions. Both of these tools are incredibly powerful and impressive, and while you can access them for a fee through the parent company who developed the models, … [Read More](https://osxdaily.com/2024/04/19/how-use-gpt-4-dall-e-3-f … ⌘ Read more

A policy proposal on our approach to deepfake tools and responsible AI
We’re asking for feedback on a proposed Acceptable Use Policy update to address the use of synthetic and manipulated media tools for non-consensual intimate imagery and disinformation while protecting valuable research.

The post [A policy proposal on our approach to deepfake tools and responsible AI](https://github.blog/2024-04-18-a-policy-proposal-on-our-approach-to-deepfake-tools-and-responsib … ⌘ Read more

https://alpopkes.com/posts/python/packaging_tools/ what a f**ing mess! :D

Get started with the latest updates for Dockerfile syntax (v1.7.0)
Dockerfiles are fundamental tools for developers working with Docker, serving as a blueprint for creating Docker images. Learn about new Dockerfile (v1.7.0) capabilities and how you can can leverage them in your projects to further optimize your Docker workflows. ⌘ Read more

How to Convert MOV to MP4 on Mac Free with ffmpeg
If you have a video file in MOV format, you may wish to convert the MOV video to MP4 format instead. While there are a variety of methods for converting MOV to MP4, the approach we’re going to address here is by using the command line, with a super easy to use and free tool … Read More ⌘ Read more

OpenSSH and XZ/liblzma: A nation-state attack was thwarted, what did we learn?
Docker CTO Justin Cormack looks at what we can learn from malicious code in upstream tarballs of xz targeted at subset of OpenSSH servers. “It is hard to overstate how lucky we were here, as there are no tools that will detect this vulnerability.” ⌘ Read more

Workflow automation & pipeline portability with AI-driven DevEx
Member post originally published on Ozone’s blog by Amina Reshma What’s the Deal with DevEx? Crack the Code: Ever wondered about developer experience, a.k .a. DevEx? Well, it’s the whole shebang – the vibe, the tools, the rituals –… ⌘ Read more

Is Your Container Image Really Distroless?
Find out what makes an image distroless, tools that make the creation of distroless images practical, and security benefits of this approach. ⌘ Read more

Docker Partners with NVIDIA to Support Building and Running AI/ML Applications
At the NVIDIA GTC global AI conference, the latest release of NVIDIA AI Enterprise was announced, providing businesses with the tools and frameworks needed to build and deploy custom generative AI models with NVIDIA AI foundation models, the NVIDIA NeMo framework, and the just-announced NVIDIA NIM inference microservices. Learn about some of the Docker resources available to customers today. ⌘ Read more

it is an addon in the download tool. Or you can use xcaddy to build it in.

its a notebook tool like evernote. @sorenpeter@darch.dk linked it above: https://joplinapp.org/

Use the Terminal cheat Tool to Generate CheatSheets for Commands
While there are some command line wizards out there who never need to look at references, search manual pages, defer to command lists, LLM queries, or web searches, the rest of us mere mortal commands line users can be helped by a really great tool called cheat. The cheat command is able to provide a … [Read More](https://osxdaily.com/2024/03/14/use-the-terminal-cheat-tool-to-generate-cheatsheets-for-comm … ⌘ Read more

How to Remove “Promote with Blaze” from WordPress
WordPress is fantastic blogging software and an excellent content management system that is prolific on the web (and used by us for this site!), and Jetpack is a great set of tools offered by Automattic to further improve the WordPress experience. But the latest versions of Jetpack default to placing a “Promote with Blaze” option … Read More ⌘ Read more

Keeping repository maintainer information accurate
Discover how keeping repository maintainer information accurate through CODEOWNERS files and automating maintenance with tools like cleanowners fosters efficient collaboration and sustainable software projects.

The post Keeping repository maintainer information accurate appeared first on The GitHub Blog. ⌘ Read more

Isode: Cobalt 1.5 – New Capabilities

This release adds new functionality and features to Cobalt, our web based role and user provisioning tool. You can find out more about Cobalt here.

Image

This enhancement enables multiple Cobalt servers to be run against a single directory. There are two reasons for this.

1. In a distributed … ⌘ Read more

@lyse@lyse.isobeef.org its a hierarchy key value format. I designed it for the network peering tools i use.. I can grant access to different parts of the tree to other users.. kinda like directory permissions. a basic example of the format is:

@namespace
# multi
# line
# comment
root :value

# example space comment
@namespace.name space-tag 

# attribute comments
attribute attr-tag  :value for attribute

# attribute with multiple 
# lines of values
foo :bar
      :bin
      :baz

repeated :value1
repeated :value2

each @ starts the definition of a namespace kinda like [name] in ini format. It can have comments that show up before. then each attribute is key :value and can have their own # comment lines.
Values can be multi line.. and also repeated..

the namespaces and values can also have little meta data tags added to them.

the service can define webhooks/mqtt topics to be notified when the configs are updated. That way it can deploy the changes out when they are updated.

Microsoft’s Reading Coach
My English pronunciation can be improved — a lot. But now I can use Microsoft’s Reading Coach. This is a new AI tool for practicing reading (in English). ⌘ Read more

Microchip Launches Affordable PolarFire SoC Kit, Expanding Access to RISC-V and FPGA for Embedded Engineers
Today, Microchip unveiled the PolarFire SoC Discovery Kit, a cost-effective and versatile tool catering to a wide range of users, including students, beginners, and seasoned professionals. This user-friendly kit facilitates quick testing of application ideas, firmware development, programming, and debugging, making it suitable for … ⌘ Read more

FRDM-MCXN947 Development Board for Embedded Applications with MCX N94/N54 MCUs
The FRDM-MCXN947 by NXP Semiconductors is an advanced development board, engineered specifically for swift prototyping with MCX N94X and N54X Microcontrollers. This board is an ideal tool for developing applications in fields such as Industrial Automation, AI and Machine Learning, Security Systems, and Smart City and Home technologies. At the heart of the FRDM-MCXN947 is […] ⌘ Read more

The architecture of SAST tools: An explainer for developers
More developers will have to fix security issues in the age of shifting left. Here, we break down how SAST tools can help them find and address vulnerabilities.

The post The architecture of SAST tools: An explainer for developers appeared first on The GitHub Blog. ⌘ Read more

A developer’s second brain: Reducing complexity through partnership with AI
As we look to empower developers with AI tools, we inadvertently integrate AI deeper into the way developers work. How do developers feel about that? And what are the most impactful ways to introduce more AI into workflows? We recently conducted 25 in-depth interviews with developers to understand exactly that.

The post [A developer’s second brain: Reducing complexity through partnership … ⌘ Read more

SparkFun, Digi International Launch XBee Tools for Cellular IoT Integration
SparkFun has partnered with Digi International to launch a new line of development boards, merging the Digi XBee module with SparkFun’s Qwiic connect ecosystem. Additionally, they have introduced a comprehensive kit aimed at both hobbyists and professional developers for integrating cellular IoT technology into their projects. The core components of the SparkFun Digi Xbee Kit […] ⌘ Read more

Erlang Solutions: Enhancing the Efficiency of Erlang and Elixir System Management: WombatOAM Now Accessible on AWS Marketplace
WombatOAM, a well-established tool for operations and maintenance in both proprietary and open-source Erlang and Elixir systems, is here to simplify your monitoring and management tasks, allowing you to concentrate on your business logic while benefiting from decades of operational expertise in Erlang-based systems. It’s now access … ⌘ Read more

4 Great Free Menubar Apps for Mac You Should Check Out
One way you can improve your Mac experience is by adding some handy tools and items to your Mac menubar item. And, coincidentally, some of the best free utilities available for Mac, are also menubar items. We’re going to cover four of the best free menubar apps for Mac, which are sure to improve not … Read More ⌘ Read more

Frenemies to friends: Developers and security tools
When socializing a new security tool, it IS possible to build a bottom-up security culture where engineering has a seat at the table. Let’s explore some effective strategies witnessed by the GitHub technical sales team to make this shift successful.

The post Frenemies to friends: Developers and security tools appeared first on [The GitHub Blog](http … ⌘ Read more

5 ways to make your DevSecOps strategy developer-friendly
Developers care about security, but poorly integrated tools and other factors can cause frustration. Here are five best practices to reduce friction.

The post 5 ways to make your DevSecOps strategy developer-friendly appeared first on The GitHub Blog. ⌘ Read more

From migration tools to updates to Enterprise Managed Users, what’s new in GitHub Enterprise
Read a round-up of the exciting, new innovation coming from GitHub Enterprise.

The post From migration tools to updates to Enterprise Managed Users, what’s new in GitHub Enterprise appeared first on [The GitHub Blog](https://githu … ⌘ Read more

Isode: Red/Black – 2.1 New Capabilities

This release adds important new functionality and adds further device drivers to Red/Black, a management tool that allows you to monitor and control devices and servers across a network, with a particular focus on HF Radio Systems.  A general summary is given in the white paper Red/Black Overview.

![](https://www.isode.com/company/wordpress/wp-content/uploads/2023/12/red-black-bla … ⌘ Read more

Erlang Solutions: Reimplementing Technical Debt with State Machines
In the ever-evolving landscape of software development, mastering the art of managing complexity is a skill every developer and manager alike aspires to attain. One powerful tool that often remains in the shadows, yet holds the key to simplifying intricate systems, is the humble state machine. Let’s get started.

State machines can be seen as models that represent system behaviour. Much like a flowchart on steroids, these … ⌘ Read more

@eapl.me@eapl.me I have many fond memories of Turbo pascal and Turbo C(++). They really did have a great help system. And debug tools! Its rare for language docs to be as approachable. QBasic was great. As was PHP docs when I first came into web.

Obligatory Twtxt post: I love how I can simply use a terminal window and some very basic tools (echo, scp, ssh) to publish thoughts, as they pop up, onto the Internet in a structured way, that can be found and perhaps even appreciated.

How to grep Match Two Strings in One Line, or Anywhere in File or Command Output
The command line grep tool is incredibly powerful and useful for searching for matches in files, sorting text and data, finding strings in large files, and so much more. One common situation many command line users may find themselves in, is seeking to grep match for two different strings in a single line. You can … [Read More](https://osxdaily.com/2023/11/27/how-to-grep-mat … ⌘ Read more

How to Use & Access GPT-4 for Free
You may already be using ChatGPT, the phenomenally powerful and useful AI tool, but the free version is based on GPT-3.5. GPT-4 is said to be ten times more advanced, with enhanced creativity, reliability, up-to-date information, and an ability to interpret more nuanced instructions, so it’s understandable why users would like to explore and experience … Read More ⌘ Read more

How to Use & Access GPT-4 for Free
You may already be using ChatGPT, the phenomenally powerful and useful AI tool, but the free version is based on GPT-3.5. GPT-4 is said to be ten times more advanced, with enhanced creativity, reliability, up-to-date information, and an ability to interpret more nuanced instructions, so it’s understandable why users would like to explore and experience … Read More ⌘ Read more

Universe’s key takeaway: Innovate better with AI-powered workflows on a single, unified platform
Discover new AI-powered features and tools to help developers stay in the flow and organizations innovate at scale.

The post [Universe’s key takeaway: Innovate better with AI-powered workflows on a single, unified platform](https://github.blog/2023-11-15-universes-key-takeaway-innovate-better-with-ai-powered-workflows-on-a-single-unified-pla … ⌘ Read more

@lyse@lyse.isobeef.org I wish more standardization around distributed issues and PRs within the repo ala git-bug was around for this. I see it has added some bridge tooling now.

imagine if your union told you what text processing tools you’re allowed to use ⌘ Read more

Security Advisory: High Severity Curl Vulnerability
The maintainers of curl, the popular command-line tool and library for transferring data with URLs, will release curl 8.4.0 on October 11, 2023. This version will include a fix for two common vulnerabilities and exposures (CVEs), one of which the curl maintainers rate as “HIGH” severity and described as “probably the worst curl security flaw in a long time.” In the meantime, you can prepare ahead of exploitability details being released … ⌘ Read more

How to communicate like a GitHub engineer: our principles, practices, and tools
Learn more about how we use GitHub to build GitHub, how we turned our guiding communications principles into prescriptive practices to manage our internal communications signal-to-noise ratio, and how you can contribute to the ongoing conversation.

The post [How to communicate like a GitHub engineer: our principles, practices, and tools](https://github.blog/2023-10-04-how-to-commu … ⌘ Read more

Announcing Udemy + Docker Partnership
Docker and Udemy announced a new partnership at DockerCon to give developers a clear, defined, accessible path for learning how to use Docker, best practices, advanced concepts, and everything in between. As the #1 rated online course platform (as ranked by Stack Overflow), Udemy will be the first to house Docker-accredited content and customized learning paths to provide developers with the latest training materials on how to best use Docker tools. ⌘ Read more

Announcing Docker Compose Watch GA Release
Docker Compose Watch, a tool to improve the inner loop of application development, is now generally available. We built Docker Compose Watch to smooth away these workflow papercuts. We have learned from many people using our open source Docker Compose project for local development. Now we are natively addressing common workflow friction we observe, like the use case of hot reload for frontend development. ⌘ Read more

Erlang Solutions: Introducing Wardley Mapping to Your Business Strategy
Since it’s creation in 2005, Wardley Mapping has been embraced by UK government institutions and companies worldwide. This is thanks to its unique ability to factor both value and change into the strategising process. It’s a powerful, fascinating tool that far more organisations across the world should be implementing today to make key choices for their future growth.

Ahead of my wider Wardley Mapping st … ⌘ Read more

A better Postman alternative: Hoppscotch
I used to use Postman for both personal and work projects. It was great for making HTTP requests without having to create curl commands. But now, Postman requires a login, which I hate. I don’t understand why a login is needed for such a simple tool. ⌘ Read more

Changes to How Docker Handles Personal Authentication Tokens
Docker is improving the visibility of Docker Desktop and Hub users’ personal access tokens. Specifically, we are changing how tokens are handled across sessions between the two tools. Learn more about this security improvement. ⌘ Read more

💻 Issue 383 - So, What’s So Special About The Mill Scala Build Tool? ⌘ Read more

@prologic@twtxt.net do not use it, but gave it a try early on and was not impressed. it gave a good outline of what I asked but then unreliably dorked up all the crucial parts.

I will say though if it is truly learning at the rate they say then it should be a good tool.