Blog
Two telemetries with opposite consent defaults on one OTLP layer: consent-gated analytics for a CLI, implied-consent observability for a service.
Publishing a seventeen-crate Rust workspace to crates.io, and why the same release configuration produced two different answers.
Add OpenTelemetry traces, metrics and logs to a Go service with middleware and manual spans, and get one end-to-end trace through the gateway.
A fresh AWS account cannot enable GuardDuty or Security Hub without a subscription, so the security baseline failed on the account it protects.
Generate an OpenAPI v3 document from an annotated proto file and serve it from the same HTTPS server with an embedded Stoplight Elements UI.
Turning three advisory CI jobs into real gates once they were trustworthy enough to block a merge, and how to tell when they are.
Replace a hand-written REST layer with grpc-gateway: add google.api.http annotations, generate the gateway, and delete the duplicate encoding.
Signed but poisoned packages show a signature proves who sent something, not what is in it. Nobody is coming to clean this up for you.
Serve HTML from the same Go HTTP server using html/template and embed, baking templates and static assets straight into the binary.
Two ways to put REST on a Go service: a hand-written net/http ServeMux, and generated handlers from an OpenAPI spec with oapi-codegen.
go-tool-base
Pioneering
cicd
rust-tool-base
Orienteering
signing
Soapbox
