Posts

In this article, I’m going to cover the complete setup for GPG commit signing on Windows, including the wrapper script solution that actually works. I really love seeing those green “Verified” badges next to commits on GitHub. There’s something satisfying about cryptographic proof that your code actually came from you. But if you’ve tried setting up GPG commit signing on Windows, you’ve probably run into the same frustrating issues I did - Git can’t find your GPG key even though gpg --list-keys works perfectly fine in your terminal. ...

Roslyn has been kicking around for a couple of years now, and it’s got some seriously cool tricks up its sleeve for how you build and keep your code in line. I’m blown away by how these new goodies with .NET aren’t just for the new stack (you know, dotnet core and all that jazz), but they’re also giving a boost to the old classics we still rely on. In my current company, we’ve got a monolithic app that’s a real time hog. It takes a solid 15s to clean, a painful 80s to build, and a whopping 5 minutes to load up for the first time in many of the developer’s laptops. And that’s not just because the solution’s a beast – it’s all the dependencies, caching, and ASP.NET doing its runtime compiling too. Talk about putting a damper on the whole code-test-run cycle 😰. ...

I’ve put in some effort in recent months to remove secrets from multiple legacy code bases. That was the easy part, the though part is to change culture to prevent new secrets from leaking into the codebase in the future. Luckily there are tools to help out with that: Gitleaks was a cool finding. It helps to find secrets before you commit them using different regular expressions that you can also extend. ...

For a long time, our company relied on MyGet as our private package repository. However, a recent outage caused a 24-hour delay in our work, so we’ve decided to stop using MyGet and switch to GitHub Artifacts as our new provider. This situation presented us with an excellent chance to enhance the quality of our pipelines by implementing some standard tools and protecting us from the risks associated with broad access to these resources. ...

In this article, we’ll explore a handy trick that can make your development journey more enjoyable. We’re here to share some knowledge and help you understand a clever coding strategy. Azure and Dotnet make a fantastic team, offering a bunch of powerful tools that work seamlessly together, making your coding adventures smoother. Today, we’re diving into the world of Azure AD’s authentication system, which can make switching between development and production modes a breeze. ...