Ship Software That Does Nothing
https://kerrick.blog/articles/2025/ship-software-that-does-nothing/

Ship Software That Does Nothing
https://kerrick.blog/articles/2025/ship-software-that-does-nothing/
"Slopsquatting is a new supply chain threat where AI-assisted code generators recommend hallucinated packages that attackers register and weaponize."
Mikel Larreategi @erralin of https://codesyntax.com shows how to Deploy Cookieplone Based Projects With GitLab CI/CD #plone #plone6 #wpd2025 #CMS #Python #React #volto #opensource #community #DevOps #GitLab #CICD https://youtu.be/7d1KQSXpodY
Maven 4: Still XML. Still boring. Still Winning.
What's so ugly about Maven?
Oh, right, XML. The ancient language feared by the hipster cult of Gradle.
But let's be honest:
You don't write build files every day. You come back after months, forget everything, and now… you're debugging a Groovy poem.
Maven? You squint at the XML, and boom. Autocomplete, structure, sanity.
Maven 4? Still XML. Still boring. Still… Winning at automations.
Yes there are more features, and yes you can use other DSL's than XML with polyglot or any other extension like also before.
Something new and interesting could be the BOM packaging and requirement of java 17. You can always build lower stuff also with 17. It's simply Java.
My killer feature of Maven: Stable, sandboxed plugins, run directly from the command line. No need to create bloated build files.
No copy-pasting the same config into 12 submodules and repositories.
All automated. All under my control.
No need to depend on the next third party cloud elf named like dependabot.
Or an SDK Man for switching java versions.
All I need is simply a JAR file and a build tool which does not disrupt me.
Favourite Maven Spells - aka plugins running on my CI without defining them:
mvn wrapper:wrapper - Because of consistency, no jar binary inside my repo.
mvn dependency:tree - See who brought the uninvited guests.
mvn versions:update-properties - Auto-update without the bots.
mvn license:add-third-party - keep track of used licenses
mvn org.owasp:dependency-check-maven:check - Security without sacrifice.
[...]
Stop waiting for the next shiny thing, you can always contribute to any tool.
Start building. Or better automate it.
Check out my latest blog post on how I was able to run a QEMU/KVM virtual machine in a GitHub Actions workflow to test my app EtchDroid.
In the true spirit of DevOps, this setup automates testing of complex interactions with hardware, eliminating the need for manual testing and freeing up valuable time for the fun parts: innovation and development of new functionality.
By bridging virtualization and CI/CD, this work demonstrates how modern DevOps practices can streamline development workflows and improve software quality.
Read more here: https://blog.depau.eu/2025/04/05/android-usb-testing-with-qemu-kvm/
Also check out my app EtchDroid: https://etchdroid.app/
PagerDuty is hiring Senior Security Engineer 3, Product & Application Security
#golang #java #python #ruby #rubyonrails #aws #azure #cicd #kubernetes #terraform #securityengineer #seniorengineer
Remote; United States
Full-time
PagerDuty
Job details https://jobsfordevelopers.com/jobs/senior-security-engineer-3-product-application-security-at-pagerduty-com-mar-18-2025-5eabee?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring
Netskope is hiring Distinguished Engineer, Client Cloud Backend
#cplusplus #golang #python #node #rest #cicd #json #kubernetes #tdd
Taipei, Taiwan
Full-time
Netskope
Job details https://jobsfordevelopers.com/jobs/distinguished-engineer-client-cloud-backend-at-netskope-com-jan-9-2025-a645ed?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring
Anyscale is hiring Software Engineer, Release & Engineering Efficiency
#aws #cicd #docker #awsec2 #kubernetes #awss3 #terraform
Bengaluru, India
Full-time
Anyscale
Job details https://jobsfordevelopers.com/jobs/software-engineer-release-engineering-efficiency-at-anyscale-com-feb-4-2025-54344c?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring
Shield AI is hiring Staff Software Engineer, Embedded Solutions
#c #cplusplus #python #azure #cicd
Dallas, Texas
Full-time
Shield AI
Job details https://jobsfordevelopers.com/jobs/staff-software-engineer-embedded-solutions-at-shield-ai-mar-18-2025-09e4ed?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring
Wiz is hiring Manager, Partner Solutions Engineer (UK)
#aws #azure #cicd #gcp #terraform
London, United Kingdom
Full-time
Wiz
Job details https://jobsfordevelopers.com/jobs/manager-partner-solutions-engineer-uk-at-wiz-io-mar-19-2025-f66759?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring
I'm thinking of migrating some of my GitHub actions to something that could be run locally more smoothly. I know there's nektos/act, but that's a bit clumsy.
Is https://dagger.io/ what I'm looking for?
Box is hiring Release Manager (GTM)
#golang #cicd
Warsaw, Poland
Full-time
Box
Job details https://jobsfordevelopers.com/jobs/release-manager-gtm-at-box-com-feb-12-2025-d6a093?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring
Zynga is hiring Senior Software Engineer (Backend) - Gram Games
#csharp #cplusplus #golang #java #unity #cicd #mongodb #postgresql #seniorengineer
Canada
Full-time
Zynga
Job details https://jobsfordevelopers.com/jobs/senior-software-engineer-backend-gram-games-at-zynga-com-sep-27-2024-cf6288?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring
Sunscrapers is hiring Data Engineer (Apache Spark)
#cicd
Remote; Poland
Full-time
Sunscrapers
Job details https://jobsfordevelopers.com/jobs/data-engineer-apache-spark-at-sunscrapers-com-nov-20-2024-f34e83?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring
ROKT is hiring Staff Software Engineer - Seattle
#csharp #golang #java #python #aws #azure #cicd #gcp #kubernetes
Seattle, Washington
Full-time
ROKT
Job details https://jobsfordevelopers.com/jobs/staff-software-engineer-seattle-at-rokt-com-aug-26-2024-102b0f?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring
Trust & Will is hiring Software Engineer II (Remote U.S.)
#javascript #typescript #angular #react #api #aws #cicd #css #docker #html #json #kubernetes #mongodb #mysql #postgresql #redis
Remote; United States
Full-time
Trust & Will
Job details https://jobsfordevelopers.com/jobs/software-engineer-ii-remote-u-s-at-trustandwill-com-jul-18-2024-288b6d?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring
Tide is hiring Senior Application Security Engineer
#cicd #awss3 #securityengineer #seniorengineer
Delhi, India; NCR: New Delhi, India
Full-time
Tide
Job details https://jobsfordevelopers.com/jobs/senior-application-security-engineer-at-tide-co-mar-14-2025-e6950c?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring
GitHub Suffers a Cascading Supply Chain Attack Compromising CI/CD Secrets, by @infoworld.bsky.social: