devops

5 articles · newest first

A row of identical blank metal boxes moving along a conveyor belt through a dim inspection tunnel, one lit green, with violet light on the others

GitHub Actions Explained: CI, Free Minutes and the Security Settings to Set First

A green check on your pull request means a robot ran your tests. Here is what that robot is, how the workflow file works, how many minutes you get free, and the three settings that keep a bad third-party action from reaching your secrets.

Aliteq Team · Oct 16 · 10 min

A row of miniature metal shipping containers with blank labels on a dark desk, linked by thin cables, one with a soft violet glowing panel

Software

Docker Compose Explained: Why Your App Boots Before Its Database Is Ready

One YAML file starts your app, its database and the wiring between them. It also has a famous trap, because the app can come up first. Here is the file piece by piece, what depends_on really waits for, where your data lives, and when Compose stops being enough.

Aliteq Team · Oct 12 · 9 min

Rows of server racks in a data center, representative of the self-hosted infrastructure Gitea instances typically run on

Software

a Gitea admin's hosting bill flagged 70% CPU usage. that's how he found the hackers

A bug that lets anyone with a free account plant a git hook is now CISA's problem — and it started with a cryptominer, not a headline.

Aliteq Team · Aug 26 · 6 min

A terminal window showing Git commands on a dark background, representing a self-hosted Git server

Software

Gogs has a history of sitting on RCE bugs. this time, someone actually fixed it

Two critical bugs let anyone overwrite Git hooks and run code on your server — and for once, the fix shipped before it turned into the usual Gogs mess.

Aliteq Team · Aug 25 · 6 min

Rows of server racks in a data center, representing a self-hosted CI/CD build server environment

Software

JetBrains' own build server just became the easiest way into your company — zero login required

A 9.8-severity flaw in TeamCity On-Premises lets anyone with network access run commands on your build server — no credentials, no phishing, just a crafted request.

Aliteq Team · Aug 4 · 6 min