Week 17 · Day 3 · Phase 6: Identity, security and hardening
GitHub Actions: test, vet, build, plus security scans (gitleaks, govulncheck, gosec, Semgrep)
This lesson is still being written.
The plan for today is above. Every lesson in the course follows the same contract:
- What problem does it solve, and what did people do before it existed?
- How does it work underneath, and what does it hide from the developer?
- When should it be used, when should it not, and what does it cost?
- Hands-on: build the smallest working thing, then break it on purpose and debug it.
- Security: what can go wrong, who could attack it, what could they reach, how would we detect, prevent and recover?
- AI check (from Phase 1): ask an assistant to explain or produce the same thing, then find what it got wrong.
This week's deliverable: Project 6