Page 6 - Monthly Archives: January 2026

Docker Bench Security automatically checks host, daemon and running containers against the CIS Docker Benchmark and produces a structured report within minutes. Reading that output correctly, prioritizing it and wiring it into the CI pipeline turns a one time audit into a continuous security process instead of an ignored PDF file.

A shared GraphQL API for multiple tenants saves infrastructure, but carries a real risk: one forgotten tenant filter in a resolver, and tenant A sees tenant B's data. Building tenant isolation systematically instead of ad hoc avoids exactly that scenario.

A misconfigured health check is more dangerous than none at all. Kubernetes restarts healthy pods because a liveness probe was written too strictly, or sends traffic to a pod whose database connection dropped long ago. This article shows how a health check for Symfony in Kubernetes becomes truly reliable, with liveness, readiness and startup probes working together.

Few topics currently cause as much uncertainty as the EU's NIS2 Directive. Many shop owners wonder whether new obligations are suddenly heading their way, even though they have nothing to do with classic critical infrastructure. The good news first: most medium-sized and small online shops are not directly affected. Still, a calm look at the topic is worthwhile, because the underlying expectations increasingly reach shops through business partners, banks and payment providers. We explain what this is about and what you can calmly look into.

An unconstrained generic type parameter accepts almost anything and thereby blocks any meaningful access to properties or methods. With the extends keyword, keyof, and well-designed default values, type parameters can be deliberately narrowed so the compiler catches real errors and developers get reliable autocomplete while writing code. This article uses a typed pick-fields function to show how these concepts work together.

Symfony Console commands are often the first helpers that touch production data directly. They deserve the same care as HTTP controllers: type-safe input handling, clear output structure, meaningful exit codes and full testability.

A new attribute or a changed attribute set can silently break existing product data or frontend logic. Testing attribute setup scripts and the logic that depends on them catches such regressions before deployment instead of after.

Anyone who rolls back an entire transaction just because a single step inside a larger batch operation failed is throwing away work already done. Savepoints let you return to a marked point inside a transaction with precision, without losing the changes that came before it. This article shows the complete SAVEPOINT syntax in MySQL, explains the behavior inside InnoDB in detail, and provides practical examples for batch imports and a PHP implementation with PDO.

A React Native design system bundles design tokens, proven components and theming into one versioned package, so teams stop rebuilding buttons, cards and forms from scratch for every new app. This article shows how a real component library grows from the first tokens into a reusable npm package.

Separate cart logic, or is another language variant enough? This decision gets made too early and too technically far too often. Here's the decision framework and the concrete consequences for theme fallback, caching, and deployment in a Hyvä setup.