Blogs

How we found and fixed a rare race condition in our session handling - The GitHub Blog
On March 8, we shared that, out of an abundance of caution, we logged all users out of GitHub.com due to a rare security vulnerability. We believe that transparency is key in earning and keeping the trust of our users and want to share more about ...

Ruby off the Rails: Code library yanked over license blunder, sparks chaos for half a million projects
On Wednesday, Bastien Nocera, the maintainer of a software library called shared-mime-info, informed Daniel Mendler, maintainer of a Ruby library called mimemagic, which incorporates Nocera's code, that he was shipping mimemagic under an incompati...



Rails: How to Reduce Friction at the Authorization Layer
It all started so innocently. I knew that I wanted something to organize authorization for Flipper Cloud. But I wasn't sure what. Pundit? Why not.I started slapping policies in and peeling out. Over time though, I noticed the same things that I no...



The two ways to Dockerize a Rails application - Code with Jason
The reason you would want to Dockerize an app for development is to make it easier for a new developer to get a development environment set up on their machine.When you have your app Dockerized for development, Docker can install and run services ...

Developer success == individual * environment - Code with Jason
In my experience, one of the common characteristics of a bad developer environment is chaos. There’s no development methodology, there’s no issue tracking, there’s no intelligent long-term project planning. Everybody just kind of does stuff.If a r...

Turn off the bits of Rails you don't use - Andy Croll
The Rails Framework consists of multiple subsystems that work together. The names of these systems typically begin with “Action” or “Active” e.g. Active Record, Active Support, Action Pack, etc.You can see the individual component gems as director...