#random - March 2025

I wrote Part 1 of a blog series diving into building a recommendation engine with Clickhouse's native vector indexing features.

https://www.runportcullis.co/blog/building-a-vintage-recommendation-engine-part-1/

Last weekend, the popular GitHub Action tj-actions/changed-files was compromised.
The issue was solved, but similar incidents could happen again in the future.
To prevent such issues, pinning action versions by full commit hash is recommended.
This post introduces how to pin GitHub Action versions across all repositories in your organization.
https://dev.to/suzukishunsuke/pin-github-actions-to-a-full-length-commit-sha-for-security-2n7p

Might be interesting for next office hours https://github.com/nwiizo/tfmcp

Not sure where to put this, but y'alls pricing page is all messed up if you scroll down: https://cloudposse.com/pricing

Securefix Action allows you to fix code securely without sharing a GitHub App private key with strong permissions such as contents:write and actions:write across GitHub Actions workflows.
You don't need to allow external services to access your code. It elevates the security of your workflows to the next level.
Furthermore, it's easy to use. You don't need to host a server application. It achieves a server/client architecture using GitHub Actions by unique approach.
https://github.com/securefix-action/action

Here attached some great resource for linux and kubernetes.

https://github.com/Pulkit12966/redhat_official_studyguide_RHCSA

Hey guys, has the new policy in America affected hiring or working with offshore agencies in any way?

Everything is going well with our current partners, but finding new ones has become difficult. I'm wondering if maybe we're not aware of some important changes in the US.

Any information would be greatly appreciated!
Have a great day!

P.S. Please remove this post if I'm breaking the community rules.

actions/create-github-app-token has supported custom permissions 🎉
https://github.com/actions/create-github-app-token?tab=readme-ov-file#permission-permission-name
https://github.com/actions/create-github-app-token/releases/tag/v1.12.0

🤔 actions/create-github-app-token is a public repository.

GitHub [9:01 AM]

To see rich preview of links from private repositories, connect to your GitHub account using /github signin. You can mute the rich previews by running /github settings.

Hi team, I made a tool to get the breaking changes between 2 Trino release versions, you can find it at https://github.com/snowsky/langgraph-trino-breaking-changes. And you can also use Gradio to get the summary and breaking changes. The project uses Langgraph and Ollama model. 🙂 An example result is at https://github.com/snowsky/langgraph-trino-breaking-changes/blob/main/output/breaking_changes.md.

Hey everyone!
Dropping in to share an invite for an upcoming webinar that might interest cloud and data center professionals—or anyone curious about scaling strategies in tech!
On April 10th at 3 PM (Jakarta, GMT+7), Datacomm & Sardina Systems are hosting a free session on data center scaling strategies, with a focus on Southeast Asia (but relevant beyond the region too!).
Join us and grab your spot here: https://www.sardinasystems.com/webinar-winning-the-market-with-datacomm/
Would be great to see some of you there!