How to Remediate a Vulnerability A few years back, I wrote an internal blog post to help IBM developers resolve their vulnerabilities. As lead engineer on the CIO's Developer Experience team, I saw firsthand how many developers were unsure how to fix the vulnerabilities my CI/CD pipeline found. The blog covered the
Lessons from modernizing 10 services using Generative AI I joined a new team at IBM a few months back, with the goal of creating MCP servers for many of the internal APIs that support employees. As I began getting up to speed on the project, I realized the APIs could use some love. These APIs are heavily used
IBM Tech 2025 - My Thoughts I just got back from Tech 2025, IBM's premier recognition, education, and development program for top technical IBMers. This year's event was in San Diego and I had a great time. The program is a mix of fun events and educational sessions, and in this post
cicd Leveling Up Your CI/CD Pipeline with Security Best Practices In my previous post, I walked through the foundational steps of a solid CI/CD pipeline including the essential tasks to build and deploy code. Getting your code to production quickly is good, but a great pipeline also makes sure that what you’re shipping is secure, verified, and compliant.
cicd Featured What Makes a CI/CD Pipeline Great? Whether you're shipping a mobile app or deploying a backend service, your Continuous Integration and Continuous Deployment (CI/CD) pipeline is the gatekeeper of quality and security. A good pipeline can catch bugs in minutes, but a great one helps prevent incidents before they reach production. Here, I&
Iceberg Local PySpark Development for Apache Iceberg Apache Iceberg is a new-ish format for working with large sets of data. Iceberg is very powerful as a production data lake or warehouse, but it can be tricky to configure a local development environment properly. In this blog, I will cover how I have configured local tables using Iceberg
