Shawn HartsockOverview: Merge RequestsThis article was originally written for internal distribution in 2017 as an introduction to GitLab Merge Requests. I’ve reproduced it here…Mar 16, 2022Mar 16, 2022
Shawn HartsockDependency Management for Packages that aren’t PackagesI’ve spent the last year working with Software Supply Chain Security issues and helping to advance the state of practice in the teams that…Mar 14, 2022Mar 14, 2022
Shawn HartsockAre people quitting because they don’t “win” enough?I frequently review mobile architectures to see if there’s any interesting developments. It’s a way to see things I wouldn’t normally see…Feb 23, 2022Feb 23, 2022
Shawn HartsockA Psychology of Software SecurityAll projects start with a need. When we discuss security projects, the inception is a threat. A threat is an extreme and immediate form of…Feb 1, 2022Feb 1, 2022
Shawn HartsockpURL as global identifiersFor the last month, I have been discussing and promoting the use of the pURL specification at work. My thesis is that the use of it…Nov 4, 2021Nov 4, 2021
Shawn HartsockGlobal Supply Chain Security — PURL and Namespace — Emerging Conventionsreference: https://github.com/package-url/purl-specOct 6, 2021Oct 6, 2021
Shawn HartsockWhat’s GitOps anyway?First we had DevOps and now we see GitOps, CloudOps, SecOps, DevSecOps, GovOps, and pretty much anything you can think of … so far I’ve…Jan 10, 2020Jan 10, 2020
Shawn HartsockOn 26 years far from homeIt has been 26 years since I was last home. I have traveled far both physically and in mind. Where I am now is as much an undiscovered…Dec 13, 2018Dec 13, 2018
Shawn HartsockSDLC: the build-masterDoes your your company have a build-master? What’s a build-master? Do you know what a Brewmaster is? It’s like that but for code.Sep 19, 2018Sep 19, 2018
Shawn HartsockWhat is the value of a sunny day?An actuarial can determine the cost of productivity, impacts on health, and the resources used. They can quantify this into a dollar…May 24, 2018May 24, 2018
