> You can't. They can execute arbitrary code. They can download another bash file via Curl and execute that.
Presumably you'd check the code of the action before you include it (and then don't use an action with non-pinned versions). This way you know the action won't execute arbitrary code for this version and won't get any other code because of version pinning.
The docker action you linked is ironic in this regard since every other version in the code seems to be pinned except the one you linked to.
The whole thing? That is what Agile Manifesto, and the associated 12 principles, is about: A thought experiment about flat organizational structures. Each of the 12 principles outline the things one needs to consider when they don't have a manager taking watch.
Where you find a VP, Agile isn't applicable. At least not in its entirety. It it is likely that you can still cherry-pick some ideas from it to apply to your non-Agile situation. "Do your manager's job for them" is often considered common wisdom after all.
You must have worked in some very unhealthy teams where psychological safety wasn't present. I'm sorry that happened. But don't confuse your experiences with that of everyone else's. There are lots of teams that are agile from the top down, including those that happen to hold a title with VP in the name.
LLMs were -in part- designed as translation tools. It's one thing they do really really well.
https://arxiv.org/html/1706.03762v7 (Attention is all you need) "Experiments on two machine translation tasks show these models to be superior in quality while being more parallelizable and requiring significantly less time to train."
Ok, looking that up, that was quite literally one of the main design goals.
And they're really quite good at translating between the languages I use. They're the best tool for the job.
Anna's Archive ISBN visualization is fascinating; it really shows how fragmented and incomplete the ISBN landscape is. We don't use their data directly (licensing concerns), but it confirmed what we were seeing: massive gaps in non-English coverage.
WorldCat is great for library holdings but harder to use for translation discovery specifically, it tells you "this library has this edition" but doesn't easily answer "has this book been translated into Basque?" across its whole catalog. We'd love to integrate it eventually, though.
Right now Wikidata turned out to be the secret weapon: it has structured translation relationships that none of the others provide.
reply