Sat.Dec 16, 2023

article thumbnail

Google moves to end geofence warrants, a surveillance problem it largely created

TechCrunch

Google will soon allow users to store their location data on their devices rather than on Google’s servers, effectively ending a long-running surveillance practice that allowed police and law enforcement to tap Google’s vast banks of location data to identify potential criminals. The use of so-called “geofence warrants” have exploded in recent years, in large […] © 2023 TechCrunch.

Banking 340
article thumbnail

Enabling CodeQL on GitHub Enterprise Server

Xebia

To enable CodeQL on GitHub Enterprise Server you need to make sure you have GitHub Actions setup and running, including your own set of self-hosted runners. You can read more about that in my previous post here. From that point you can get started to enable CodeQL. Of course, you’ll need to have it enabled in your license, and upload that license file to your server as well.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

Robotics Q&A with Nvidia’s Deepu Talla

TechCrunch

A version of this q&a first appeared in TechCrunch’s free robotics newsletter, Actuator. Subscribe here. We’re wrapping up our end-of-year robotics Q&A series with this entry from Deepu Talla. We when I paid a visit to NVIDIA’s Bay Area headquarters, back in October. For more than a decade, Talla has been the chip giant’s Vice […] © 2023 TechCrunch.

Hardware 310
article thumbnail

Making the case for GitHub’s Secret scanning

Xebia

After scanning the GitHub Actions Marketplace for the security of those actions (read that post here ) I was curious to see what happens if I’d enable Secret Scanning on the forked repositories. I regularly teach classes on using GitHub Advanced Security (where secret scanning is part of) and I always tell my students that they should enable secret scanning on their repositories.

AWS 130
article thumbnail

Get Better Network Graphs & Save Analysts Time

Many organizations today are unlocking the power of their data by using graph databases to feed downstream analytics, enahance visualizations, and more. Yet, when different graph nodes represent the same entity, graphs get messy. Watch this essential video with Senzing CEO Jeff Jonas on how adding entity resolution to a graph database condenses network graphs to improve analytics and save your analysts time.

article thumbnail

Google’s Gemini comes to more apps, Cruise slashes its workforce and Tesla issues a recall

TechCrunch

Hey, folks, welcome to Week in Review (WiR), TechCrunch’s regular newsletter covering the major happenings in the tech-o-sphere — or most of them, anyway. As the world’s largest AI conference, NeurIPS, got underway in sunny New Orleans, Google shared more on Gemini, its flagship AI model family — and lots happened elsewhere. In this edition […] © 2023 TechCrunch.

More Trending

article thumbnail

Robotics Q&A with UC Berkeley’s Ken Goldberg

TechCrunch

For the next few weeks, TechCrunch’s robotics newsletter Actuator will be running Q&As with some of the top minds in robotics. Subscribe here for future updates. Part 1: CMU’s Matthew Johnson-Roberson Part 2: Toyota Research Institute’s Max Bajracharya and Russ Tedrake Part 3: Meta’s Dhruv Batra Part 4: Boston Dynamics’ Aaron Saunders Ken Goldberg is […] © 2023 TechCrunch.

Research 301
article thumbnail

How GitHub Actions versioning system works

Xebia

TL;DR The runner just downloads what you specified, by getting it from the tag The runner does not do SemVer at all. It’s up to the maintainer Even GitHub does not update (or create) all SemVer versions, so @v3 is not necessarily the latest thing for v3! The marketplace shows releases, not tags. If the maintainer does not actually release, it’s not visible It’s more secure to use a SHA hash instead of a tag: read more info here Semantic versioning When using GitHub Actions, the default is to u

System 130
article thumbnail

Startups and physicians must unite to empower women’s health

TechCrunch

Women's health, as it has existed for the past 200 years, is dead. One hammer for all of our problems will no longer suffice. © 2023 TechCrunch. All rights reserved. For personal use only.

296
296
article thumbnail

Enabling GitHub Actions on Enterprise Server: Common gotcha’s

Xebia

When customers start using GitHub Enterprise with Actions and private runners, there are some common gotcha’s you can run into. In this post I’m sharing the ones I have encountered so far. Even Dependabot comes along, since that runs on Actions as well for GitHub Enterprise Server. List of topics: First of all: Don’t use self signed certificates on GitHub Enterprise The default actions in will download the binaries from github.com Actions org will be cleaned up with each major/minor update Mis

article thumbnail

Streamlining Database Compliance with CI/CD Integration

IT leaders know the importance of compliance at every level, but the database often gets left behind as other environments are automated for robust protection. This whitepaper emphasizes the importance of robust, auditable, and secure database change management practices for safeguarding organizational compliance. Learn how automating database compliance: Mitigates risk Protects against security vulnerabilities Helps avoid regulatory penalties Aligns database workflows with app lifecycle Turns d

article thumbnail

Deal Dive: Training the workforce for the clean energy transition

TechCrunch

Montamo hires and trains people to work in the clean energy transition with an emphasis on helping migrants build a new career. © 2023 TechCrunch. All rights reserved. For personal use only.

Energy 270
article thumbnail

Configuration as Code for the GitHub platform

Xebia

I am slowly diving into ‘Configuration as code’ for the GitHub Platform: all the things you want to automate with as few steps as possible, making big impact. Some of these things also fall under ‘GitOps’ in my opinion: if you store it into a repo and on changes you make, the automation will make it happen. The plan is to have this post as a central starting point for people searching to achieve a similar setup.

Examples 130
article thumbnail

Democracies are fragile, and hardware is hard

TechCrunch

Sometimes it's important to state the obvious. That democracies are fragile but that technology can help. And also that crowdfunding isn't always the best way to launch an innovative product. © 2023 TechCrunch. All rights reserved. For personal use only.

Hardware 259
article thumbnail

GitHub access tokens explained

Xebia

There is a lot of confusion of what GitHub (access) tokens are and how you should use them for automating things inside of GitHub. There are three main types of tokens: Personal Access Tokens (PATs) The GITHUB_TOKEN environment variable (explainer here ) An access token created from a GitHub App (explainer here ) You can use these tokens to authenticate to GitHub and perform actions with it, like cloning repositories, making API calls, etc.

article thumbnail

Peak Performance: Continuous Testing & Evaluation of LLM-Based Applications

Speaker: Aarushi Kansal, AI Leader & Author and Tony Karrer, Founder & CTO at Aggregage

Software leaders who are building applications based on Large Language Models (LLMs) often find it a challenge to achieve reliability. It’s no surprise given the non-deterministic nature of LLMs. To effectively create reliable LLM-based (often with RAG) applications, extensive testing and evaluation processes are crucial. This often ends up involving meticulous adjustments to prompts.

article thumbnail

Self-care is giving the world the best of you instead of what’s left of you

CEO Insider

With a new year around the corner, now more than ever, it’s time to contribute to the most important person, you! Life gets hectic and the last few years has presented challenges, along with opportunities in more ways than one. We can get caught up in the “doing” of life instead of the “being” and spend […] The post Self-care is giving the world the best of you instead of what’s left of you appeared first on CEOWORLD magazine.

Analytics 144
article thumbnail

Create a GitHub App from a manifest

Xebia

At my customer we have the need to create a lot of GitHub Apps. In this specific case we use GitHub Apps as an integration point between GitHub and Jenkins: the code is moving to GitHub, and we still want to trigger our existing Jenkins jobs on code changes. We have over a 100 teams in Jenkins, all with their own pipelines. We have a security requirement that teams that connect to their code in a Jenkins pipeline only can see their own code, and not the repos from other teams.

article thumbnail

ROI of Executive Coaching 500% Return

CO2 Business Leadership

Executive coaching has become a pivotal strategy for businesses aiming to navigate the complexities of modern leadership. Understanding the ROI of Executive Coaching is crucial for organizations committed to fostering growth, innovation, and sustainable success. What is ROI of Executive Coaching Mean? The “ROI of executive coaching” refers to the Return on Investment from engaging in executive coaching services.

article thumbnail

Best Practices for Building the Data Pipelines

Dzone - DevOps

In my previous article ‘ Data Validation to Improve Data Quality ’, I shared the importance of data quality and a checklist of validation rules to achieve it. Those validation rules alone may not guarantee the best data quality. In this article, we focus on the best practices to employ while building the data pipelines to ensure data quality. 1. Idempotency A data pipeline should be built in such a way that, when it is run multiple times, the data should not be duplicated.

Data 88
article thumbnail

Top 5 Challenges in Designing a Data Warehouse for Multi-Tenant Analytics

Multi-tenant architecture allows software vendors to realize tremendous efficiencies by maintaining a single application stack instead of separate database instances while meeting data privacy needs. When you use a data warehouse to power your multi-tenant analytics, the proper approach is vital. Multi-tenant analytics is NOT the primary use case with traditional data warehouses, causing data security challenges.

article thumbnail

Solved “Cannot find module ‘fs/promises'” in Node.js

Angularjs | Reactjs | jQuery | Nodejs tutorials

In this post, we’ll investigate the reasons behind this error, look at the modifications made to early versions of Node.js, and talk about fixes. The error message “Cannot find module ‘fs/promises'” can be ambiguous, particularly in relation to the filesystem (fs) module promises in more modern Node.js versions. What’s the Error: When trying to use […] The post Solved “Cannot find module ‘fs/promises'” in Node.js appeared first on JS-Tut

69
article thumbnail

Integrate Walrus CLI With CI/CD Tools to Deploy the 2048 Game

Dzone - DevOps

Walrus , an open-source application management platform, simplifies the deployment process and seamlessly integrates with your existing CI/CD pipelines. In this tutorial, we will guide you on integrating the Walrus CLI with your CI/CD tools to deploy the 2048 Game.

Games 59
article thumbnail

Integration with Existing IT Infrastructure: Database Management Services and Remote DBA

Women on Business

We've Moved! Update your Reader Now. This feed has moved to: [link] If you haven't already done so, update your reader now with this changed subscription address to get your latest updates from us.

article thumbnail

Analyzing the GitHub marketplace – Dependency security is a big issue

Xebia

I have been a fan of GitHub Actions since the beta in the end of 2019. And the more I use them and create my own, the more I have this growing itch to see how these actions are made, how active the community is, and what we can do to improve this ecosystem. So I decided to do some research and see what I could find out. I already have a (now inactive) Twitter bot that scrapes the GitHub Actions Marketplace and stores that info for later use (unfortunately, the marketplace has no API to u

Analysis 130
article thumbnail

7 Pitfalls for Apache Cassandra in Production

Apache Cassandra is an open-source distributed database that boasts an architecture that delivers high scalability, near 100% availability, and powerful read-and-write performance required for many data-heavy use cases. However, many developers and administrators who are new to this NoSQL database often encounter several challenges that can impact its performance.

article thumbnail

Board Performance Optimization: Beyond Compliance Towards Excellence

N2Growth Blog

Understanding the Concept of Governance Excellence Governance excellence refers to the strategic oversight conducted by a company’s board of directors that ensures ethical, sustainable, and profitable organizational operations. It not only necessitates understanding complex legal and financial obligations but also the ability to steer company decisions towards a shared vision fueled by principles of integrity and accountability.

article thumbnail

My GitHub Actions workflows are not starting

Xebia

Check the GitHub status! Every once in a while there is an outage on e.g. GitHub Actions, and I see a lot of influx of users on this blogpost. So before you start reading this, check the GitHub status page to see if there is an outage. If there is, you can wait until it is resolved. If there is not, you can continue reading this post to see if you can find the cause of your issue.

Testing 130
article thumbnail

Maturity levels of using GitHub Actions Securely

Xebia

I’ve been discussing using GitHub Actions in a secure way for a while now (see here , and I got a question on how to improve your usage of actions. I wanted to capture that info in an easy to follow set of steps, so here we go: Default demo examples: version pinning or by branch Review the source code and trust the publisher / action SHA hashes Dependabot for actions Fork the repo and take control github-fork-updater Internal marketplace Request actions process Photo by Markus Spiske on

article thumbnail

Take back control over your GitHub Notifications!

Xebia

I notice a lot of people getting lost in their GitHub notifications. Here is what you can do to get some control back! The default settings send you emails for everything. A lot of people then create an email rule to move all those emails to a specific folder, which means they will never look at those emails again! With some tweaking you can make the notifications work for you.

Mobile 130
article thumbnail

Reimagined: Building Products with Generative AI

“Reimagined: Building Products with Generative AI” is an extensive guide for integrating generative AI into product strategy and careers featuring over 150 real-world examples, 30 case studies, and 20+ frameworks, and endorsed by over 20 leading AI and product executives, inventors, entrepreneurs, and researchers.