Devops

What is act and what problem does it solve? When building pipelines using GitHub Actions, testing code inside our codebase locally is possible. However, as we add more steps to our workflows and push changes to GitHub, we may encounter issues that require repeated iterations of pushing fixes until everything works correctly. This process can be time-consuming and inefficient. To enable faster feedback loops, we can use act tool that allows you to run GitHub Actions locally without needing to push your commits to GitHub. ...

What is Gitleaks? Gitleaks is a Static Application Security Testing (SAST) tool that scans git repositories, files, and directories for secrets. By integrating Gitleaks into your development workflow, you can catch potential vulnerabilities early and prevent them from being committed to your codebase. Why Are Secrets Committed to Code? Secrets, such as tokens, API keys, database passwords, and credentials, are often inadvertently committed to code repositories. This can happen for several reasons: ...