Mat MatMoore

Tools for detecting and removing sensitive information from code repositories

Git history

Truffle hog detects high entropy

Home office tool uses gitrob (regex based) https://github.com/UKHomeOffice/repo-security-scanner/blob/master/rules/gitrob.json
MOJ tool https://github.com/ministryofjustice/repo-audit
https://github.com/awslabs/git-secrets
https://github.com/auth0/repo-supervisor
https://github.com/ukgovdatascience/dotfiles/blob/master/git_template/hooks/

Adopt a modern build tool

Context

The existing build scripts used ant
We had multiple build artefacts, ant scripts and property files
A lot of configuration was targeted at a specific environment and OS (windows)
Dependencies were bundled with the project

Problem

The build scripts were difficult to understand
Ant is not a technology we use for other projects so developers are unfamiliar with it

Problem

I want to build a container inside my circleci build and mount files from the outer build environment.

Running this docker command works outside of circleci, but not on circleci (when using the docker exectutor with setup_remote_docker).

circleci@07b4d1bb33c0:/tmp/workspace$ docker run -p 7001:7001 -p 9002:9002 -v $(pwd):/u01/oracle/properties store/oracle/weblogic:12.2.1.3
Domain Home is:  /u01/oracle/user_projects/domains/base_domain
awk: warning: command line argument `/u01/oracle/properties/domain.properties' is a directory: skipped
The domain username is blank. The Admin username must be set in the properties file.

Job Barometer

I want my job to give me:

Autonomy to decide what I work on and how I go about it ✅
Small feedback cycles and ability to experiment (e.g. being able to release frequently) ❌
Novelty (not doing the same thing over and over) ✅
Purpose (I can agree with the team's goals) ✅
People to collaborate with, learn from, and teach ✅

I want to avoid:

Tools covered by https://www.udemy.com/course/react-2nd-edition/learn/lecture/7707740, in the order they're introduced.

Liveserver

A web server

live-server public

Babel CLI

How other WYSIWYG editors handle accessibility

Accessibility guidance for authoring tools

	from xml.etree.ElementTree import parse, tostring
	from glob import glob

	child_perspectives = {}
	all_viewpoints = []


	for filename in glob('pui/webroot/WEB-INF/config/view/*.xml'):
	with open(filename) as f:
	doc = parse(f)

	4 tzinfo-data
	4 sass-rails
	4 rails
	3 uglifier
	3 puma
	3 govuk_notify_rails
	3 bootsnap
	2 wicked_pdf
	2 sqlite3
	2 simple_command

	@startuml

	partition Development {
	(*) --> "Write code in development environment"
	"Write code in development environment" --> "Build for development environment"
	"Build for development environment" --> "Deploy to development environment"
	"Deploy to development environment" --> "Manual testing by developers"
	"Manual testing by developers" --> "Push branch to github"
	"Push branch to github" --> "Code review"
	"Code review" --> "Merge code"

	with course_buckets as (
	select
	course_slug,
	extract(days from open_for_enrolment_at - proposal_submitted_at) as days,
	width_bucket(extract(days from open_for_enrolment_at - proposal_submitted_at), 0, 200,20) as bucket
	from course_creation_milestones
	where open_for_enrolment_at > current_timestamp - interval '3 months'
	),

	bucket_totals as (