Ken Muse

Learn how IPv6 affects your DevOps workflows, from GitHub's IP ranges to Kubernetes networking, Docker containers, and the latest ARC improvements.

A Halloween lesson: how a weaponized Git branch name let attackers inject code via a GitHub expression and the simple steps you can take to block it.

Learn how to create a secure CI/CD pipeline by starting with securing your most important asset: your people.

Restrict outbound DNS and IP access on GitHub-hosted runners using iptables, ip6tables, and DNS-over-HTTPS blocking to harden your CI/CD.

Learn how to restrict DNS resolution and improve CI/CD security on GitHub-hosted runners by using a local Unbound allow list.

Discover how to optimize Git clones by using references to share repository data and Git LFS objects across multiple systems.

Trying to publish npm packages to GitHub Packages with Yarn?

Exploring why AI tools complement rather than replace developers, and how smart companies use AI to enhance team productivity instead of downsizing talent.

A step-by-step guide to adding configurable man page support to custom Buildroot packages, extending the GitHub CLI package with comprehensive documentation.

Discover Git worktrees and learn how you can work with multiple branches simultaneously without stashing or committing incomplete code.

Add Python 2 support to your CodeQL Docker image using multistage builds (and some Docker tricks) to support security scanning in ARC.

Learn how to build a custom Docker image with CodeQL pre-installed for GitHub ARC runners, eliminating download times and ensuring consistent analysis.

A step-by-step guide to creating your first custom Buildroot package for a binary package containing an installable GitHub CLI.

Speed up your Buildroot builds with prebuilt toolchains, SDK reuse, and CI/CD caching.

Learn how to use Buildroot's menu system to create and configure a minimal, Bash-only image for Docker.

Build Docker images and OCI packages easily with Buildroot.

Learn what's in an Open Container Image and how to build your own images without Docker using some common command line tools.

Learn how AI tools use prompts and tools to enhance responses, making interactions smarter and more dynamic.

Learn to run Docker commands inside a GitHub Actions job container and understand the magic behind how Actions creates and manages job and service containers.

Discover how to securely authenticate Docker-in-Docker containers inside Kubernetes to enable private registry access.

Ever wondered why you can't just export your environment variables in GitHub Actions?

Discover practical techniques for dynamically authenticating with Git using environment variables or secret vaults to retrieve user credentials.

Discover the intricacies of Git authentication, how it works, and how to configure credential helpers to allow fine-grained control over authentication.

Trying create code that is truly flexible?

Learn how to extract and validate signed Git commits using the Gitsign certificates and OpenSSL to enhance your software supply chain security.

Use Gitsign and GitHub Actions for keyless Git commit signing to enhance supply chain security and ensure code provenance without managing private keys.

The new version of Actions Runner Controller has performance fixes, improved configurability, and a new approach to metrics.

Discover the best automation standards for your smart home!

How we learned to ditch data leaks and embrace local IoT control for ultimate privacy and smarter living.

Discover why "it should work" is software development's most dangerous phrase and how this mindset leads to unreliable, untested code.

Uncover the hidden secrets and inner workings of Git LFS!

Learn how to configure Git LFS endpoints and to safely migrate repositories that are using .lfsconfig to manage the storage location.

Infrastructure-as-code should continuously improve.

In Kubernetes, we cannot manage resources at the pod level and must resort to setting requests and limits on containers.

Learn how to standardize development practices by distributing dependencies, settings, and analyzers using NuGet packages.

Explore how to modernize the Docker-in-Docker support in GitHub Actions Runner Controller (ARC) using the latest Kubernetes feature: native sidecars.

Kubernetes has a powerful feature that can help you build more robust deployments.

Discover the world of GitOps, where Git becomes your source of truth for deployments and learn the three models for defining your GitOps practices.

Packages are code, too!

There's a simple trick to easily share .NET build tasks between developers.

Compiling code and packaging it as a ZIP file to deploy a .NET application can be simplified to a single command with this native MSBuild feature.

When repositories are migrated, it's easy to break the links to the submodules.

GitHub tools make it easier to manage the dependencies of a project and ensure your environment remains consistent and stable.

A company's development practices are only as secure as their supply chain.

Build custom extensions and Webviews is for Visual Studio Code is just the start.

A custom extension in VS Code gives me a more efficient blogging process.

Combining Visual Studio Code with Hugo has given me a great workflow for my blog.

I use Visual Studio Code and Hugo to manage my blog and make it easier to create content.

Sometimes you need to try out a modified image or custom chart you're creating in Kubernetes.

Learn how to implement private Visual Studio code extensions that are designed to support a specific development container or Codespaces environment.