Michael Heap

I wish that Twitter would let you pin tweets that weren't your own. I'd definitely have this one pinned twitter.com/sarahmei/statu…

@javierguzmandev Good news! This was awaiting review and has just been published. The same content can be found at developer.konghq.com/gateway/instal… Please let us know if you spot any other inconsistencies

Hello there! Thanks for reaching out. So I was following these docs (wayback machine url) web.archive.org/web/2025061420… if you visit the current docs docs.konghq.com/gateway/latest… you get redirected to new docs that don't cover what I was following. I guess is related to what I've just seen related to Kong dropping OSS?

Lovely how Kong has changed the documentation about how to integrate with Kubernetes before I finish my deployment. New docs don't contain the same info. Thankfully wayback machine exists⛑️

@Leo_Godin Glad you like it! Which TIL did you land on first?

@mheap your blog is fantastic. Love the TIL section. What a great way to show tips and tricks without the compulsion to write an article. michaelheap.com/til/

@DaveLiddament Aha! 0.3.3 Looks like it's the only version that matches the version constraint: dave-liddament/sarb 1.7.0 requires php >=8.0 <8.3 -> your php version (8.3.0) does not satisfy that requirement. Running with `--ignore-platform-req=php -W` got the latest version installed

@mheap Hey Michael, Thanks for reaching out. Do you know what version of SARB you are using. You'll probably have to check the composer.lock, unfortunately I haven't added a `--version` flag to the SARB itself.

@DaveLiddament I have a use case for SARB with an external tool, but `tool | tool2sarb | sarb create tool.baseline` isn't working for me. Has something changed? ``` Not enough arguments (missing: "baseline-file, static-analysis-tool") ```

📣 Big news, straight from #KubeCon + #CloudNativeCon: KIC 3.0 is here—now with full Gateway API support. - 🔗 More flexibility - 🎯 Detailed traffic routing - 🔄 Vendor-neutrality - 📡 Enhanced router support New blog from @mheap: bit.ly/460IYXI #KubeKong @ShaneUtt

Hello Chicago and hello #KubeCon! 6 more hours to survive until sleep to beat the jet lag, so this feels like a good time to start a new book

It feels like I see someone asking “how do I let pull requests from forks access my GitHub Actions secrets?” every other day. It turns out that it's not too hard to have both security _and_ a great developer experience. michaelheap.com/access-secrets…

I wrote a thing about T shaped people, and spider-shaped #devrel michaelheap.com/spider-shaped-…

@jjohnson5253 I believe you need to put the entire header in the vault. It only handles values that start with {vault:// (#L321-L329" target="_blank" rel="nofollow noopener">github.com/Kong/kong/blob…)

@mheap How do you access Hashicorp vault secrets in Kong Konnect? I connected my vault to Konnect but not sure how to test it. I want to use a secret as an API key in a transformed header, but Kong doesn't seem to interpret the URL {vault://hcv/hello/foo}

@mattstauffer Use `brew info <package> --json=v2` - works for cask installs as well as normal formula

I'm sure I could do `brew list --cask -l` and parse through it but I'm hoping there's a better option someone's come up with🙏

Valet currently checks if a Brew package is installed using `brew info {packageName} --json`, but that doesn't seem to be possible for Casks. I'm sure I can hack through it, but has everyone ever written a programmatic way to test "is this cask installed" I can crib from?

@RabbiGreenberg Is it bad that my first instinct was to head to jwt.io after seeing this?

eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJtYXN0b2RvbiI6Imh1bW11c29ucmFpbHNAZm9zc3RvZG9uLm9yZyIsImdpdGh1YiI6ImJlbmNncmVlbmJlcmciLCJ3ZWIiOiJiZW5ncmVlbmJlcmcuZGV2In0.CBzqi-Yxlu_G3oAiFrrrpZkeA0uXgnmYK2r48KkXr1c

This weekend we published an article from @mheap about what it means to build reputation, and how to do it yourself. yougotthis.io/library/buildi…

@tweetingsherry Alas, not this year for me

Tickets booked with the team for @PHPUKConference! First time back on the circuit, looking forward to catching up with some old friends. Who's going? @michaelcullumuk @mheap @miss_jwo @maccath @GeeH @choult @leeboynton @NeoThermic (to tag but only a few)

@gbysec 🙌

@mheap well done on pin-github-action ! I just saw you have that feature to support updates on commit hashes ! :)

@dependabot @GitHubSecurity @GHSecurityLab Just FYI, I was trying out dependabot's action updates, with a commit sha, and I'm not sure it works ? I've used a very old checkout version "uses: actions/checkout@0b496e91ec7ae4428c3ed2eeb4c3a40df431f2cc" docs.github.com/en/code-securi…

Well, this was unexpected! An awesome touch from the Stars team at #githubuniverse2022

FORBES TECHNOLOGY Why We Need APIs (And APIs Need Us Too) via @ForbesTech @kong forbes.com/sites/adrianbr…

Fun fact: the reason that \ acts like a line continuation in Bash is not because Bash added special support for line continuations, but rather because the \ is literally escaping the following newline character

An excellent new 10 minute read from @mheap on how to help your teams set goals with OKRs, complete with some templates to get you started. yougotthis.io/library/manage…

@MissAmaraKay @leggetter @Czajkowski Mostly from scratch (they predated a lot of OpenAPI tooling), with some investigation in to generated SDKs for types towards the end. The general consensus was that we should generate types + http requests, and write a thin layer that developers use by hand