I Built fix-commit: A Git Pre-Commit Tool That Doesn't Just Find Secrets — It Fi

<p>Most GitLab linters tell you if your YAML is valid. Very few tell you if your YAML is <strong>dangerous</strong>.</p> <p>It's easy to feel safe when you see a green build, but

<h2> The 11pm key rotation </h2> <p>Two things have burned me more than once, and I suspect they've burned you too.</p> <p><strong>Incident one:</strong> a deploy that went green

<p>My regex secret scanner once blocked a commit because a test file contained the string <code>sk_test_EXAMPLE_KEY_DO_NOT_USE</code>. The same week, a colleague on another

<h3> The "Ghost" in the Codebase </h3> <p>We’ve all been there. You’re running a security audit on an old repository, and your scanner flags 45 "Potential Secrets." You spend the

<p>BagOS is an MCP server I maintain. It lets an AI agent read token data on Bags, a Solana launchpad,<br /> and, if you configure a wallet, trade and claim creator fees. I built

<p>I've been writing software professionally since 2011.</p> <p>Java, C#, Kotlin, Node.js. Enterprise backends, microservices, APIs, data pipelines. I've shipped production code

<p>In January and February 2026, security researchers filed <a href="https://www.heyuan110.com/posts/ai/2026-03-10-mcp-security-2026/" rel="noopener noreferrer">30 CVEs against

<h2> I Built an npm CLI Tool That Checks If Your Project Is Deployment Ready </h2> <p>Deployments often fail for the smallest reasons.</p> <p>A missing <code>.env</code> file.<br