MatMoore

Tools for detecting and removing sensitive information from code repositories

Git history

Truffle hog detects high entropy

• Home office tool uses gitrob (regex based) https://github.com/UKHomeOffice/repo-security-scanner/blob/master/rules/gitrob.json
• MOJ tool https://github.com/ministryofjustice/repo-audit
• https://github.com/awslabs/git-secrets
• https://github.com/auth0/repo-supervisor
• https://github.com/ukgovdatascience/dotfiles/blob/master/git_template/hooks/

MatMoore

Adopt a modern build tool

Context

• The existing build scripts used ant
• We had multiple build artefacts, ant scripts and property files
• A lot of configuration was targeted at a specific environment and OS (windows)
• Dependencies were bundled with the project

Problem

• The build scripts were difficult to understand
• Ant is not a technology we use for other projects so developers are unfamiliar with it

MatMoore

Problem

I want to build a container inside my circleci build and mount files from the outer build environment.

Running this docker command works outside of circleci, but not on circleci (when using the docker exectutor with setup_remote_docker).

circleci@07b4d1bb33c0:/tmp/workspace$ docker run -p 7001:7001 -p 9002:9002 -v $(pwd):/u01/oracle/properties store/oracle/weblogic:12.2.1.3
Domain Home is:  /u01/oracle/user_projects/domains/base_domain
awk: warning: command line argument `/u01/oracle/properties/domain.properties' is a directory: skipped
The domain username is blank. The Admin username must be set in the properties file.

MatMoore

from xml.etree.ElementTree import parse, tostring
from glob import glob

child_perspectives = {}
all_viewpoints = []


for filename in glob('pui/webroot/WEB-INF/config/view/*.xml'):
    with open(filename) as f:
        doc = parse(f)

MatMoore

Job Barometer

I want my job to give me:

• Autonomy to decide what I work on and how I go about it ✅
• Small feedback cycles and ability to experiment (e.g. being able to release frequently) ❌
• Novelty (not doing the same thing over and over) ✅
• Purpose (I can agree with the team's goals) ✅
• People to collaborate with, learn from, and teach ✅

I want to avoid:

MatMoore

   4 tzinfo-data
   4 sass-rails
   4 rails
   3 uglifier
   3 puma
   3 govuk_notify_rails
   3 bootsnap
   2 wicked_pdf
   2 sqlite3
   2 simple_command

MatMoore

@startuml

partition Development {
(*) --> "Write code in development environment"
"Write code in development environment" --> "Build for development environment"
"Build for development environment" --> "Deploy to development environment"
"Deploy to development environment" --> "Manual testing by developers"
"Manual testing by developers" --> "Push branch to github"
"Push branch to github" --> "Code review"
"Code review" --> "Merge code"

MatMoore

with course_buckets as (
  select
      course_slug,
      extract(days from open_for_enrolment_at - proposal_submitted_at) as days,
      width_bucket(extract(days from open_for_enrolment_at - proposal_submitted_at), 0, 200,20) as bucket 
    from course_creation_milestones
    where open_for_enrolment_at > current_timestamp - interval '3 months'
),

bucket_totals as (

MatMoore

Tools covered by https://www.udemy.com/course/react-2nd-edition/learn/lecture/7707740, in the order they're introduced.

Liveserver

A web server

live-server public

Babel CLI

MatMoore

How other WYSIWYG editors handle accessibility

• https://ckeditor.com/docs/ckeditor4/latest/examples/accessibility.html
• https://www.tiny.cloud/docs/advanced/accessibility/

Accessibility guidance for authoring tools

• https://talks.hiddedevries.nl/kjfT9F/amplifying-your-accessibility-with-better-authoring-tools
• https://www.w3.org/WAI/standards-guidelines/atag/