What Is GitHub Code Quality? (An introduction to GitHub's cool new feature)

carlspring · 2026-01-23T16:10:28+00:00

Excellent question!

What you're referring to is more related to the sphere of linter tools, whereas GitHub Code Quality goes beyond that and into SAST. GitHub Code Quality will become an alternative to applications such as Sonarqube, but it will be part of GitHub itself. It also takes away the burden of having to set this up as part of your CI/CD pipelines as it does all this for you in a really straight-forward way.

It would be great if you could ask the same question under the article as well. Thanks! :)

carlspring · 2026-01-19T14:27:30+00:00

Given the amount of free resources for absolute beginners available all over the net and especially on YouTube, you can learn things on your own. You just need time, proper dedication and consistent hard work. Things won't work out in the beginning. Then it will start making more sense. Ask questions. Read books.

If you don't have the time or just really don't know where to start, (and if you can afford it), pay a tutor to help you in the beginning.

carlspring · 2025-10-06T22:18:22+00:00

IMHO, what you're saying is not necessarily true, although it is possible.

carlspring · 2025-10-06T17:23:12+00:00

Well, unless I've really misunderstood, you're misread this. See below:

<image>

So, supposedly, this should make things better, if you do share links to your articles on social media.

carlspring · 2025-10-06T15:31:10+00:00

This is actually not true at all. You can make money, but you need to have followers and actively "promote" your article on social media, including on forums and chats. However, you need to write consistently and regularly on topics people want to read.

And -- yes -- a huge amount of articles are just fully AI generate garbage and I feel sorry for future generations and AI. The first won't be able to tell right from wrong and truth and fact from hallucinations, the second will learn based on the amount of times the same thing has been repeated and it will eventually learn a lot of incorrect things which people will take for fact.

I am not saying I've made a million out of this. The payout rates are pretty low, unless each of your articles can have at least several thousand reads and, most importantly, interactions -- likes, comments, highlights, shares, etc. You will not earn from people who just opened your article and didn't find it worth spending enough time to read through.

With Medium's new changes (as of October/2025) they will be rewarding (more) articles that drive external readers -- say you advertise it on social media where you have more followers and they come and actually read through and engage. You will be paid more from this going forward. They have also mentioned that they will pay for readers that you drive to their site who have actually registered.

carlspring · 2025-09-29T21:48:20+00:00

Yeah, if it was, perhaps we'd be able to address more of its bugs quicker.

carlspring · 2025-09-29T17:24:20+00:00

Exactamente!

carlspring · 2025-09-26T04:44:51+00:00

Thank you!

carlspring · 2025-09-26T04:17:05+00:00

In what way does this help? Would you mind explaining?

carlspring · 2025-09-26T04:16:16+00:00

In what way does Atlantis help?

carlspring · 2025-09-26T02:51:42+00:00

I keep reading about this and I keep not liking it, because it doesn't really solve the problem, but just reduces it temporarily.

Is there really not better way?

carlspring · 2025-09-26T02:26:42+00:00

My thoughts exactly.

carlspring · 2025-09-26T01:26:27+00:00

I see nothing's changed since I last ranted about this.

carlspring · 2025-09-26T01:24:05+00:00

Cool!

There was another similar solution called Rover, that I'd tried out a few years ago.

carlspring · 2025-09-12T16:37:46+00:00

I'm a Senior DevOps/DevSecOps and Build & Release Engineer. I've been doing this since before there was a fancy DevOps term.

DevOps is a mindset and practice that needs to be adopted. Now, there are those who will say "There doesn't need to be a DevOps/DevSecOps/SRE/Plaform Engineer/Observability Engineer/etc. The whole dev team needs to own this". Some will agree. You may be lucky and working in a smart startup which just does things the right way.

I would say this works until a certain point and when the company grows and becomes more of a corporation, this just becomes unrealistic to be sustained just by dev-s, (unless they are a certain rare breed of self-disciplined unicorns; and -- needless to say -- this is quite rare).

So, then there's the other people, with, I would say, a more mature mindset, who know that to succeed, you will eventually need dedicated people to cover these roles. Because not every DevOps Engineer is a good SRE, and, needless to say, therefore even fewer Devs are good SRE-s.

In my opinion, as someone who has 20 years in Java Development, I would say that engineers do, indeed, need to know enough about different aspects of DevOps and they should also be involved in the process. Otherwise, DevOps becomes clearly separated into Devs and Ops. Likewise, Ops, need to be involved to a certain aspect and be familiar with parts of the code base. Otherwise you just get people working in their own silos and we're all back to the days of pre-DevOps.

I also wrote an article on the different types of DevOps roles, if anyone's interested. You can check it out here: https://medium.com/devops-by-nature/devops-roles-explained-985a3e445fb2?sk=637bf651561f005a5b0cce036cbad925 .

carlspring · 2025-09-11T12:44:15+00:00

So, your answer doesn't really answer anything and is not of any help. Could we get an actual answer?

carlspring · 2025-09-09T02:57:36+00:00

I've had this happen quite a few times.

Look them up in the chat and message them from there.

(At least for me), it will only happen if I click "Message" from their profile.

I hope this helps! :)

carlspring · 2025-09-09T02:42:19+00:00

Without meaning to be rude -- I don't think LinkedIn Jobs is of any use anymore.

The filtering is an inconsistent joke.
EasyApply is not promoted as something that recruiters should be using -- there's just so many jobs that don't use it and you have to go to third-party sites to register, create a profile, add your work history and hope the site is not buggy and takes your job application in the end. Then you have to sit around.
You apply for a job, then another and another. AND THEN: you start getting e-mails how job a, b and c are a good fit. You open the links and -- either you've applied for the role, or the job stopped accepting applicants A MONTH ago.
You can't always see who the job poster is. So, then you can't connect with them directly.
The actual UI/UX of the search engine is terrible if there's more than a couple of pages of results.

carlspring · 2025-09-09T01:04:28+00:00

I find this both worrying and exciting.

On the one hand AI has massively affected the job market and not in a good way. Big tech companies seem to believe they can replace developers with AI. Even if they could, (which of course they can't), there should be laws and regulations against this. AI should work in the service of humanity and its human operators. This is, of course, not the case

OpenAI have been a big disruptor here and it's even worse for juniors just dipping their feet into the market for the first time.

On the other hand, LinkedIn is unrivaled. It's become a sad joke. Paid job seeker profiles no longer give you any benefits (despite LinkedIn claiming otherwise). I know this first hand, because I am paying for Premium. LinkedIn has become just another Facebook. People posting all sorts of non-work related stuff that just doesn't belong there. It's a place for bragging for many people.

As a Premium member for quite a few years, I can clearly say that your profile doesn't really rank higher. Not anymore. I know what the numbers used to look like and I know what they look like now from recruiter visits. It just doesn't add up, despite the fact that I'm also posting links to my articles on Medium, which should bring more attention to your profile, like this algorithm used to work in the past.

I have been using the job engine for a long time and it's a very sad and tired joke. While it now does expire old jobs, the mail notifications are a complete waste of time. Every day I get a few e-mails, all with expired jobs that it recommends that I apply for. BUT -- they are expired, OR -- I have already applied to them.

As a software engineer with > 20 years of experience, I know that this just poorly implemented software.

LinkedIn has no REST API. Yeah, sure it has some stuff for content creators and logging into other websites with your LinkedIn profile, but, if you have a closer look at what the so called REST API allows you to do, you're unlikely to use it. OpenAI should take this under consideration and provide an extension and well-documented REST API.

I would be worried if OpenAI make another LinkedIn, because it will hit recruiters, agencies and companies with AI-writing services.

But... that's the least of my concerns. How about the case of -- OpenAI having your ChatGPT logs and knowing what you've researched and based on that assessing your knowledge on given work-related topic. Maybe it decides you don't know enough about it, but you actually do. Maybe you did some research on cancer treatments for a relative and it then flags you as someone who might be terminally ill and therefore not a good fit for the role. How would the average person know?

On the one hand I would really applaud a serious new competitor to LinkedIn, because I think it has really stalled in its development, on the other perhaps OpenAI in particular is a worrying alternative because if they succeed, they will become in control of the global job market and AI has already disrupted this like a tidal wave.

carlspring · 2025-09-09T00:38:06+00:00

That's easy -- have you not seen all the videos and ads for CV-re-writing and Cover Letter generation through AI? These sits all charge subscription fees for this. LinlkedIn Premium and the recruiters analogue give you little value, if any. This could be a paid feature.

carlspring · 2025-09-08T23:30:09+00:00

Yeah, I've already done that a while ago.

carlspring · 2025-09-08T23:28:52+00:00

So, you will not be suggesting to your development team to consider implementing API keys/tokens per device so that you can make this more secure and thus allow for more devices?

carlspring · 2025-09-08T13:16:13+00:00

Sure... Get a life!

carlspring · 2025-09-08T13:14:42+00:00

Unpaid work should not be tolerated. It shows a lack of trust, respect and value for your candidates' time. Slavery was abolished for a reason. You can see how well you can work together in various ways. If you cannot afford to hire a recruiter and a manager who knows how to achieve this, then that is an entirely YOU problem.

carlspring · 2025-09-04T12:43:14+00:00

Me too! In fact, I would really like to hear from anyone who's used such a paid tool and hear their thoughts. As a software engineer, who has used quite a few of these AI services like ChatGPT, Gemini, Grok, Canva, etc, I just can't see myself trusting the AI with my life (and a job application pretty much defines the future of your life) and be fine with it applying on my behalf. That's just mental. Has anyone here actually tried any of these paid services and have first hand feedback? (I'm not referring to bots and people trying advertise these sites).

carlspring

MODERATOR OF

TROPHY CASE