- https://github.com/sethvargo/ratchet for pinning external Actions/Workflows to specific commit hashes

- https://www.warpbuild.com/ for much faster runners (also: runs-on/namespace/buildjet/blacksmith/depot/... take your pick)

- soon moving to Buildkite for orchestration of our CI jobs

I still just need a reasonable alternative for the "store our git repo, allow us to make and merge prs" part of things. Hopefully someone takes all the pieces that the Pierre team is publishing and makes this available soon. The Github UI and the `gh` cli are actually really nice and the existing alternative code storage tools are not great IMO.

Slightly annoying to have to wrap some clis in scripts that generate the short-lived token, but it feels really magical to have services securely calling each other without any explicit keys or password to even store in our vault.

Lots of cool benefits --- for instance, we ran the compromised Trivy github action a few weeks ago, but our Github Actions had 0 keys for it to leak! Also really great that I don't have to worry about rotating shared credentials on short notice if an engineer on my team decides to leave the company.

For instance, something like https://self.xyz. It's strictly better than the alternatives:

- already works with existing government-issued ids

- doesn't require submitting scans of your ID to third parties that can then be stored and leak

- allows privacy-preserving verification like "is this person older than 18" without requiring sharing of the person's exact age

[0] https://en.wikipedia.org/wiki/A_Syntopicon

https://www.infinityplus.co.uk/stories/blit.htm

Or my favorite of his basilisk stories, different kinds of darkness: https://www.lightspeedmagazine.com/fiction/different-kinds-o...

Congratulations Armin, and Mario, and good luck.

Dug up the email, here's what my boss said directly:

In terms of tech to keep up on, it might be worth while to play around with node.js a bit as we've been doing a few small projects using the Express MVC framework. A great reference for js, (which I remember chatting with you briefly about) is Javascript the Good Parts (Douglas Crockford). You may also consider seeking enlightenment on Armin Ronacher's github page (he's a python master, leader of flask, genshi, pocoo, long time python contributor) https://github.com/mitsuhiko. His code is pretty top notch. I follow Kenneth Reitz quite a bit too (Armin and he often work on projects together). Kenneth is know for le*git and python's request library.

If you're thinking about getting into running, I'd say the first piece of gear to buy is a good pair of shoes from your local running store. Don't worry about fancy watches or gels or arm sleeves or whatever.

I did finally buy a smartwatch (coros) last year, after training my whole life with just a casio. It's made me a lot more adventurous as having the GPS tracking means I can run offroad and even off-trail without worrying about keeping accurate track of my distances and paces. This is probably the second piece of gear I'd recommend buying and I wish I had done it sooner. The numbers are useful, it makes it easier to do the hobby, and it means I can use Strava which is a fun way to stay in touch with my fitness friends.

Third piece of unsolicited advice is that you absolutely don't have to run marathons.

> t. slow, but ran the fastest mile of my life last year, good friends with many semi pros.