Great short post from @mheap.dev: michaelheap.com/visibility-i... It takes practice to deliver the right level of abstraction--too many details are not great. But surprises are so so bad. Even if Alice delivers a month later than Bob, people understand why and are more likely to accept it.

Visibility is Velocity

Why visible progress beats speed: how incremental updates build trust, reduce risk, and change how complex product work is perceived.

michaelheap.com

The tj-actions/changed-files compromise prompted me to write up how I secure GitHub Actions workflows using SHAs without maintenance pain Go from insecure to security conscious in < 15 minutes, including configuring automatic updates through Dependabot or Renovate michaelheap.com/pin-your-git...

Pin your GitHub Actions

Secure your GitHub Actions by pinning them to commit SHAs, preventing supply chain attacks. Learn how to automate updates and enforce best security practices.

michaelheap.com

More flights means more writing. This time, I've explicitly written down my thoughts on the quality <> speed <> scope tradeoff for teams that I work with (now, and in the future) michaelheap.com/quality-spee...

Quality > Speed > Scope

Never compromise on quality. Never compromise on speed. Ship regularly, and deliver value faster.

michaelheap.com

More time on planes means more time to polish up old drafts. This time, how to source your AWS credentials from 1Password when using the aws CLI michaelheap.com/aws-credenti...

Using AWS credential_process and 1Password

Store your AWS credentials securely in 1Password and load them at runtime using the AWS CLI's `credential_process` helper

michaelheap.com

Some people think that one gigantic Slack channel is the way to communicate. I don't know why, but they do. Don't be like them. michaelheap.com/slack-channe...

Slack channels are free

Good Slack hygiene isn’t about having fewer channels - it’s about having the right channels.

michaelheap.com

"Bikeshedding" is a potentially confusing term, we should discuss possible options for alternative names

This week’s festival of consumerism has been a great success* After many years of “this will last a little longer” I bit the bullet and replaced everything that’s > 5 years old (most are 8-10) * (for some definition of success)

I planned to write something insightful as my pinned intro post, but then I saw this. Introduce yourself with four video games:

Wile E. Coyote@legumann.bsky.social · 2y ago

Introduce yourself with four video games :

Hello! Yes, you there. The one looking at a screen I heard early tech twitter was having a resurgence here I left the bird site about 2 years ago and have happily been social-free since then But now it’s time to come back. I’ve missed you all, and can’t wait to get to know you all over again