SHA Pinning Is Not Enough A few days ago I wrote about how the Trivy ecosystem got turned into a credential stealer. One of my takeaways was “pin by SHA.” Every supply chain security guide says it, I’ve said it, every…

I had known about the Trivy attack, but didn’t know the details. This article goes into some detail :

I like to think I’m not racist

That one is sketchy. Luckily easy to remove

Apple News Quartile blocks spelling out “help trapped j. Quartile”

The puzzle setter for Apple News Quartile have a sense of humor. Here’s the top rows from today’s puzzle.

Learned a good word today: “buttinsky”. MW defines it as “a person given to butting in”

I’m not doing YOLO. Still reviewing every line. But then I heard Simon’s fireside chat and he’s all YOLO all the time. Think might give it a go, but probably only in a VPS or VM.

Suburbs are the worst. If only the city wasn’t worse for families. Sigh!

I need to drink what you’re drinking.

Introducing Chief: Delightfully Simple Agentic Loops - Geocodio Chief is an autonomous coding agent that breaks projects into tasks and runs Claude Code in a loop to complete them one by one. It produces one commit per task, which makes reviewing the output much e...

It makes me so ridiculously happy to see how much positive feedback @codemonkey.io is getting about Chief - and he finally has a blog post up about it!

Ralph loops with one commit per task

www.geocod.io/code-and-coo...

If you’re thinking the job market is tough, that’s because it is.

www.wsj.com/economy/jobs...

This is because many states make it easy to register to vote while getting a driver license. If you're not a citizen, be very careful about your government forms.

Easy voter registration comes back to bite immigrants.

There are increased reports of people getting NTA (notice to appear in immigration court), a preliminary step for possible deportation.

www.reddit.com/r/immigratio...

That was my favorite drink, before GERD. The spicy tomato juice aka bloody mary mix was best.

PATH gets mangled when using direnv from git-bash on Windows · Issue #253 · direnv/direnv Hello, Installing the official git release for Windows will also install the git-bash.exe shell. Rather than an emulation layer, I believe this is bash plus lots of the standard Linux tools which h...

Apparently I'm one of the dozen people who use Windows with Bash as their main shell. direnv is completely broken in this setup. The solution is in a GitHub issue comment from 2019, that some how hasn't made it to the main repo.

github.com/direnv/diren...

From the 1Password community on Reddit Explore this post and more from the 1Password community

I thought it was just me, but seems it's a widespread problem. Windows Hello prompts make sticky SHIFT key without any keypress. You gotta hit SHIFT once or twice to release.

www.reddit.com/r/1Password/...

My first Linux encounter was SCO Linux. What was yours?

10 Ways to Stay Hopeful in a Chaotic World - World Food Program USA When the world feels chaotic, it’s normal to feel helpless. This guide offers simple, evidence-informed ways to shift from paralysis to purpose.

This hopeful message from the WFP felt nice.

I made a dashboard using Claude Code to visualize the visa issuance statistics for FY2024. Did you find any surpises?

visa-data.pages.dev

Trump's new executive order will ban, over the next three years, more than 140,000 spouses, fiancés, and minor children of US citizens and legal permanent residents. Nearly 100,000 nuclear family of US citizens. Unconscionable

So sorry Michelle.

Baumol effect - Wikipedia

It’s like Baumol's cost disease, but for business models. Subscription business is so good, others have to change.

en.wikipedia.org/wiki/Baumol_...

My god

Not a Ruby user, but I love Python match..case as well. If there are two or more elifs, I’m reaching for match..case.

Hot!

Look very nice. Are those jalapeños?

Ah! Indeed. I don’t have a lot of it, but it’s still the slowest part. I’m planning to switch from eslint to biome for that reason.

Ouch! What language is this?

It took a hundred years or more for this to happen to newspapers. Google did it in 25.

Abebooks used to be great in US too. I think they’re owned by Amazon now.

“Boost Your GitHub DX” out now - Adam Johnson My new book, Boost Your GitHub DX is out now!

😸😸😸 Woohoo! My new book, Boost Your GitHub DX, is out now! 😸😸😸

It’s about using GitHub more effectively, touring you through the fundamental features with my experience-based commentary.

Check out the release post for more info and a link to the free sample:

adamj.eu/tech/2025/11...

#GitHub #Git