logoalt Hacker News

esafak • today at 6:56 PM • 1 reply • view on HN

You're not shifting left unless you guarantee local tests always run, faithfully to production. That rarely happens. Local testing should be supplementary. We use https://hk.jdx.dev/


Replies

efficax • today at 6:58 PM

We do ensure this, requiring signed proof, running in containers that would be identical to github runners (more or less). Now, this could be spoofed by an engineer, but we operate in a high trust environment

➕ show 1 reply