CI/CD 规范:测试、lint、发布与供应链安全
评估一条 CI/CD 流水线的质量,应依据三项客观标准:结果产出速度、结果可信度,以及流水线被攻破后的损失范围。前两项决定开发者是否信任流水线反馈:产出缓慢或偶发误报的流水线会被反复重跑直至通过,日志不再有人阅读。第三项决定仓库在单个被投毒的 action 事件中的暴露程度。
10 min read
Notes on Agent runtimes — design decisions laid open: why it is this way, what it costs, and when it stops being true.
Quote of the day · November 15关于接受Breaking Bad
You got the job. Do yourself a favor and learn to take yes for an answer.