Beyond the OWASP Top 10: How to identify security vulnerabilities in your code
We have all shipped code to production that passed every check. The PR gets approved, the build goes to production,…
Articles about code review, AI, and engineering productivity
We have all shipped code to production that passed every check. The PR gets approved, the build goes to production,…
The volume of pull requests is exploding, in part because a lot of code is now generated by AI. This…
Many people see pull requests as an annoying final step before deploying. The PR sits in a queue, gets a…
A single comment in a code review can block a pull request for days. The suggestion may be right, but…
Everyone has seen that pull request that just doesn’t move. It stays open for days, collecting comment after comment. Someone…
A slow code review process points to a bigger problem. Our process doesn’t define clear expectations, and the real culprit…
Code review is often the biggest bottleneck in development. We treat it as a required quality gate, but the process…
New platform teams often get their first metrics wrong. They build dashboards with things like CPU usage, memory, and number…
The most dangerous systems in an organization are often the ones no one complains about. They sit there, processing transactions…