Documenting code, one commit at a time.
Addressing layout issues is a common task in web development. One frequent problem is ensuring that headers, particularly in sidebars, remain visible even when the user scrolls down the page. This post details how to resolve a scenario where a sidebar header was being cut off during scrolling by implementing CSS sticky positioning.
The original
Improving the auditability of AI interactions is crucial for maintaining security and control. A recent update focuses on preventing the exposure of raw code to AI models, enhancing data security, and providing better insights into flagged code changes.
Previously, raw git diffs were sent to AI models for analysis. This approach, while providing detailed context,
This post discusses recent improvements to our application, focusing on enhanced security measures and smarter code generation capabilities.
We've introduced a 'safe mode' feature, giving tenants more control over security audits during post generation. By default, safe mode is enabled, ensuring all generated content undergoes a thorough security check.
Improving the way we audit code changes is crucial for maintaining security and stability in our applications. Recently, we transitioned from feeding raw Git diffs directly to our AI analysis tools to using structured summaries. This shift significantly enhances auditability and reduces the risk of exposing sensitive information.
Sending raw diffs to AI models
We've recently rolled out enhancements to our post generation process, focusing on flexibility and code accuracy. These updates include a 'safe mode' toggle and intelligent programming language detection.
Recognizing that different tenants have varying security needs, we've introduced a 'safe mode' toggle.
Security audits are crucial for maintaining the integrity of applications. However, overly sensitive rules can lead to false positives, particularly when dealing with illustrative code examples. This post discusses how to refine audit rules to distinguish between genuine security vulnerabilities and intentionally simplified or educational code snippets.
Auditing tools are crucial for maintaining application security and compliance. However, false positives can create unnecessary noise and divert attention from genuine threats. One common source of these false positives is the detection of reserved domain names, such as those under the IANA's example.com, example.net, and example.
This post delves into a practical approach for creating flexible UI components that seamlessly adapt to various themes within an application. We'll explore how to avoid hardcoded styles and instead leverage style variables to ensure consistent visual appearance across different themes.
In many applications, UI components are initially developed with a specific
We've recently enhanced the user experience within our application by integrating LinkedIn login and registration, specifically aimed at simplifying the recommendation flow. This post details the changes and the reasoning behind them.
Previously, recommenders needed a GitHub account, which added friction to the process.
In software development, a robust workflow is crucial for maintaining code quality and minimizing potential issues. Recently, we've focused on refining our development process to incorporate more rigorous code review practices, specifically before finalizing changes.
Integrating a 'dev:code-review' step earlier in the workflow offers several key advantages:
