Posts

PyPI Trusted Publishing

PyPI Trusted Publishing    PPTP is an auth method that allows CI/CD platforms to publish software packages directly to the Python Package Index (PyPI) without using long-lived passwords or API tokens. Instead of storing sensitive credentials in your code repo, this feature leverages the OpenID Connect (OIDC) standard to establish direct machine-to-machine trust between PyPI and your build environment.  How It Works   The tool replaces manual secret management with an automated cryptographic exchange:   1) Pre-configuration: You link your specific code repository and workflow to your project settings on PyPI.  2) Identity Verification: When a deployment triggers, your CI/CD platform sends a short-lived OIDC identity token to PyPI.  3) Token Issuance: PyPI verifies that this token matches your pre-configured trust policy.  4) Scoped Upload: PyPI gives the CI/CD pipeline a temporary, single-use API token that expires quickly to complete the uplo...
Post a Comment
Read more

Code Participation Statistics

Image
Source:  https://x.com/nichochar/status/2026344879517728908 What’s the bigger picture? New website creation is up 40% year over year. New iOS apps are up nearly 50%. GitHub code pushes jumped 35% in the US. All of these metrics were flat for years before late 2024. The graphs look like hockey sticks. People who have never written a line of code are building and launching software. Keep in mind, we can and should note that more quantity does not necessarily mean better quality. But the fact remains that the barrier to creating software has dropped dramatically, and that is a fundamental shift in the landscape of software engineering.
Post a Comment
Read more

What agentic development still requires from you

What agentic development still requires from you 1) Vision/Goal. AI will never tell you your goal.  Without the goal, how do you evaluate it is a success? 2) The current step. This is what most people set in their prompts.  Don't you think it is better to start with the vision and make the steps to reach the vision? 3) Clear requirements for each of the steps. If you cannot articulate what success looks like in a way that can be evaluated, no amount of autonomous execution will produce it. Agents cannot clarify requirements they are never given. They will fill the gaps with assumptions, and those assumptions compound. 4) Strong abstractions. An agent given a well-designed system with clear module boundaries, coherent interfaces, and good separation of concerns will produce better results than an agent given a tangled codebase where everything depends on everything else. Clean architecture is more important when agents are doing the implementation, because agents amplify the p...
Post a Comment
Read more

Gen AI Dev Exam

Gen AI Developer Exam    Integration approaches: 1) Bedrock integration (unified API), 2) AI Factories integration (on-premises), 3) SageMaker AI integration (self-host), 4) Direct provider API integration (direct API)   Nova Forge enables building custom frontier models, provides infrastructure and tools to create LLMs from scratch.    RAG components : 1) Doc processing: Chunks knowledge while maintaining context, 2) Embedding models: Converts text to mathematical vectors, 3) Vector storage: Efficiently stores and searches vectors, 4) Query processing: Matches user questions to relevant content, 5) Response generation: Combines retrieved context with queries    Nova tiers : Nova 2 Pro for complex tasks, Nova 2 Lite for cost-effective use cases, Nova 2 Sonic for real-time conversations, and Nova 2 Omni for multimodal capabilities. Data encryption:   Encryption in transit : Bedrock auto encrypts all data in transit using TLS 1.2+ via HTTPS ...
Post a Comment
Read more

Plate adjustments

  Plate adjustments https://www.youtube.com/watch?v=Pp9MwZkHiMQ https://github.com/bennjordan/PlateShapez
Post a Comment
Read more

Github CoPilot to Slack

Github CoPilot to Slack Overall   The Github Copilot cloud agent integration in Slack allows you to interact with  Github Copilot cloud agent from your Slack workspace and is included in the GitHub App for Slack. From within a Slack thread or direct message, you can initiate cloud agent sessions using the context of your conversation. Prerequisites You must have:     1) GitHub account with access to GitHub Copilot through a paid GitHub Copilot plan.     2) Slack account and be a member of a Slack workspace.     3) GitHub App for Slack installed. Steps You must:     1) Connecting the GitHub App to your GitHub account:  a) In Slack, you must call  @GitHub Copilot and then   login  , b) authorize the app to access your GitHub account , c) click "Configure settings" in Slack, d) type the repo name where you are using the cloud agent.               2) Using ...
Post a Comment
Read more

Strongman vs Weak President

Strongman vs Weak President      A friend argued that he liked a "strongman" (quick action; action happens because no effective opposition; a.k.a. "benevolent dictator").  I argued for the opposite (representative democracy with weak president; requires consensus (so great ideas win); slow/takes time so more gradual change; more representative of the will of the people; journalists, intellectuals, writers, artists, political dissenters, religious minorities, racial minorities, labor unions, immigrants, and LBGTQ like weak presidents; requires educated public and middle class).      The core problem with the strongman is what you think about what they implement.  A bad strongman is dictator.  Super wealthy that want political influence like strongmen since only one side to buy (so cheaper and very likely to get results and quicker results).
Post a Comment
Read more