Hacker News Reader

boleary-glon Open-Source Detector of CISA's Known Exploitable Vulnerabilities

Hello! ProjectDiscovery team member here - great to see the community leveraging Nuclei templates in new and exciting ways!

Be sure to let us know how we can help, and you are welcome to open issues on GitHub or join our Discord if you have questions.

boleary-glon Nuclei: Automated Vulnerability Detection at Scale

ProjectDiscovery team member here - let me know if anyone has any questions. You can also join our Discord server at https://nux.gg/discord

boleary-glon What I learned at Gitlab that I don't want to forget

Original author here - I would encourage anyone who wants to learn more to read the entire GitLab Values page [1] - it is massive (would be 51 pages if printed out). This summary is just that - a summary.

For example the Spending Company Money page [2] doesn't begin and end with the quote I shared - it just begins with it. It's the starting point, and in no way the articulation of the _entire_ policy. There are lots of guidelines past that to help folks out and understand what is reasonable...but the starting point is what is important. Trusting people to make good decisions for themselves and for the company is a very healthy thing, and I feel bad for folks who haven't gotten to experience that in work environments.

Thanks for all the commentary - it was a nice send off to make it to the top of this site for a time :)

[1] https://about.gitlab.com/handbook/values/

[2] https://about.gitlab.com/handbook/spending-company-money/

Edited for spacing and to say - one last time - GitLab employee here.

boleary-glon What I learned at Gitlab that I don't want to forget

Fixed! Thanks for mentioning.

The link is https://blog.boleary.dev/gitlabs-values/#disagree-commit-and...

boleary-glon IEEE Hosted Gitlab Instance

You can explore the public projects here: https://opensource.ieee.org/explore

boleary-glon Take Advantage of Git Rebase

Thanks - today I learned

boleary-glon Take Advantage of Git Rebase

I don't know if Christian would go this far, but I actually put this into my ~/.gitconfig so that I'm always rebasing

[pull]

rebase = true

edited for line spacing

boleary-glon Gitlab plans to delete dormant projects in free accounts [rumor]

Hi all, GitLab employee here.

Wanted to make sure you saw this: https://twitter.com/gitlab/status/1555325376687226883

boleary-glon Twitter Is Down

System status also green: https://status.twitterstat.us/

boleary-glon We are splitting our database into Main and CI

> IIRC GitLab uses Redis as well

GitLab employee here.

You're correct. We also have Redis for a few things: Rails caching, Sidekiq jobs, session data, CI, and a few other things. You can learn more about GitLab.com's infrastructure architecture here [1] and more about what Redis is used for here [2].

[1]: https://about.gitlab.com/handbook/engineering/infrastructure... [2]: https://docs.gitlab.com/ee/development/redis.html

boleary-glon We are splitting our database into Main and CI

GitLab employee here.

We did experiment with a few ideas outside of this decomposition method. In the end what you talked about here in your comment is exactly correct. And we value boring solutions in the end: https://about.gitlab.com/handbook/values/#boring-solutions.

boleary-glon Arm Open Source makes a seamless migration to GitLab

Hi, GitLab team member here.

There is work to do, and product and engineering are putting more focus on fixing longstanding issues, and increase reliability. Specifically for GitLab Runner, 15.0 and later bring many fixes, next to supporting podman.

https://gitlab.com/groups/gitlab-org/-/issues/?sort=updated_...

boleary-glon Gitlab New Logo: DevOps Is at the Center of Gitlab

...I mean. It doesn't hurt ;)

boleary-glon Ask HN: How do you keep track of software requirements and test them?

GitLab employee here - we list Requirements Management as at "minimal" maturity. I'm sure the team would love to hear more about why the feature didn't work for you - you can learn more about the direction and the team here: https://about.gitlab.com/direction/plan/certify/#requirement...

boleary-glon Push Options: Control Gitlab CI/CD and Merges with Git Push

GitLab team member here. I like this option a lot and I added https://gitlab.com/gitlab-org/gitlab/-/issues/359271

boleary-glon Push Options: Control Gitlab CI/CD and Merges with Git Push

GitLab team member here. I would love that option too...I added https://gitlab.com/gitlab-org/gitlab/-/issues/359270

boleary-glon Push Options: Control Gitlab CI/CD and Merges with Git Push

I like a lot of these ideas, I added these issues:

- Add squash commits option in push options for merge requests [1]

- Show equivalent push options at bottom of /-/pipelines/new [2]

- Show equivalent push options at bottom of create merge request page [3]

[1]: https://gitlab.com/gitlab-org/gitlab/-/issues/324619

[2]: https://gitlab.com/gitlab-org/gitlab/-/issues/359268

[3]: https://gitlab.com/gitlab-org/gitlab/-/issues/359269

(edited for line spacing)

boleary-glon Push Options: Control Gitlab CI/CD and Merges with Git Push

GitLab team member here. And I totally agree - I forget to use them all the time!

And thoughts on making it easier? Maybe a suggested set of git aliases or some sort of wrapper?

boleary-glon Gitlab Critical Security Release

I don't think it's currently scheduled: https://gitlab.com/gitlab-org/gitlab/-/issues/30672

boleary-glon Gitlab Critical Security Release

Looks like it shipped in 14.8 (4 days ago)

https://docs.gitlab.com/ee/user/admin_area/reporting/spamche...

boleary-glon Gitlab Critical Security Release

GitLab employee here.

We have internal tooling that we're working on incorporating into GitLab itself to help with this: https://about.gitlab.com/blog/2021/08/19/introducing-spamche....

boleary-glon Ask HN: Which open source versions of SaaS products would you like to see?

I agree - it’s shocking to me how immature any open source CRM out there is. Chatwoot is fantastic but only solves half of the equation. Chatwoot + a lightweight CRM would be a killer product for small B2B startups.

boleary-glon Bolt founder on Stripe/YC

It started to lose me because Lyft wasn't a YC company: https://www.ycombinator.com/topcompanies/

boleary-glon Gitlab Handbook's HN Page

I like how meta this became and how many internal Slack channels are being discussed on HN

boleary-glon Faster Gitlab CI/CD pipelines

GitLab team member here - thanks for this write up! Great to see your thought process throughout.

boleary-glon Improving GitHub Code Search

GitLab team member here.

> no way to combine a text search with label/milestone/status filters, etc.

You can combine text search with field search (like label/milestone/status. Here’s an example: https://gitlab.com/gitlab-org/gitlab/-/issues?search=Visuali...

boleary-glon Gitlab.com is down

GitLab team member here

We believe we have mitigated the incident, but continue the work to monitor and make additional corrective measures: https://twitter.com/gitlabstatus/status/1462838897499508737

boleary-glon Gitlab.com is down

GitLab team member here - you can also watch https://twitter.com/gitlabstatus

boleary-glon Cloudflare Pages goes full stack

GitLab team-member here. So exciting to see GitLab support! I'll finally be giving Pages a try later today. :)

boleary-glon Gitlab 14.4 Released

GitLab team member here. We're really excited for the GitLab Operator GA [1], then new keyboard shortcut to access the Web IDE [2], and LOTS of improvements to our static code analyzers [3].

Also don't miss that two more paid features were added to the free tier of GitLab EE as part of our Registration Features Program [4].

[1] https://about.gitlab.com/blog/2021/10/12/open-shift-ga/

[2] https://docs.gitlab.com/ee/user/project/web_ide/

[3] https://about.gitlab.com/releases/2021/10/22/gitlab-14-4-rel...

[4] https://docs.gitlab.com/ee/development/service_ping/index.ht...

Also big thanks to our MVP this month for adding a GREAT feature for opening remote repositories with the GitLab VSCode extension.

(edit for line breaks)