Github on Samarthya

From finding to fix: Black Duck pull requests on GitHub Enterprise Server

Tue, 27 Oct 2026 20:05:18 -0400

A vulnerability report that nobody reads is a smoke alarm with no battery. The goal is not more findings. The goal is a pull request that a developer can review and merge before lunch.

Why this post
#

SentinelOne’s overview of GitHub vulnerability management describes the job as “discovering, triaging, and remediating security vulnerabilities in GitHub repositories, dependencies, and workflows”. It lists the usual native tools: Dependabot, code scanning, secret scanning and security advisories. It also admits the gaps: no asset inventory or risk scoring, and dependencies that Dependabot cannot track.

Moving to Hugo, part 3: Living with Hugo

Mon, 26 Oct 2026 07:20:00 -0400

Migrating is a project. Living with the result is a habit. Here’s what a normal week with a Hugo site looks like, and what to do when something needs updating.

Writing a post
#

Every post is a folder. The theme’s archetype fills in the front matter for me:

Moving to Hugo, part 2: The migration playbook

Mon, 26 Oct 2026 07:10:00 -0400

Ten phases, in the order that kept my risk low. Each one ends with something you can check, so you always know whether it’s safe to move on.

The numbers come from my own move: 137 WordPress posts from six years, a few hundred images, and a domain that also carried email. Your numbers will differ; the order shouldn’t.

The domain moved

Sun, 25 Oct 2026 21:00:00 -0400

The scariest step, done. DNS moved to Cloudflare without changing a single record, mail checked in both directions, and only then was the website pointed at GitHub Pages.

samarthya.me serves the new site over HTTPS. www redirects to it.
Every old /wps/… link lands on the right post.
Wrote it all up: Rebuilding samarthya.me, in four parts.

Rebuilding samarthya.me, part 4: Moving the domain without losing mail

Sun, 25 Oct 2026 12:30:00 -0400

Moving a website is easy. Moving a website that shares a domain with your email is where people lose mail for a weekend. This is how the switch went, in the order that kept everything working.

Three services, three jobs
#

It helps to separate what used to be bundled at one host:

Rebuilding samarthya.me, part 3: A new home on Hugo

Sun, 25 Oct 2026 12:20:00 -0400

The content was safe. Now it needed a home that’s easy to keep alive: something I can write in, push, and forget about.

The stack
#

Hugo, pinned to one exact version with mise, so a future release can’t silently break the build.
Blowfish as the theme, added as a git submodule and never edited. Every change lives in the site’s own layouts/ and assets/css/, so theme updates stay a one-line operation.
GitHub Actions → GitHub Pages. Push to main, and about a minute later the site is rebuilt and live.

A portal, not just a blog
#

The first version looked like what it was: an unmodified theme with 137 blank tiles. Imported posts have no “feature image”, so every card was empty. Three changes turned it into a place:

Rebuilt on Hugo

Sat, 24 Oct 2026 22:00:00 -0400

A long day, and a good one. The blog is now a static Hugo site: no database, no plugins, nothing to break into. It’s published straight from a git repository.

137 posts converted, and every old link redirects to its new address.
An old backup turned up 126 of the missing images. A handful are still gone for good.
A new homepage that says what this place is for, and topics that sort themselves.

Fall down, get up, build again.

Personal Access Token

Thu, 23 Sep 2021 16:45:26 +0000

In case you are still using the basic/auth it is time to move to personal access token.

Official documentation is the best guide.

Personal access tokens (PATs) are an alternative to using passwords for authentication to GitHub Enterprise Server when using the GitHub API or the command line.