AI-Assisted Code Review on GitHub: Approaches, Implementation, Pros and Cons
Compare GitHub Copilot, hosted review apps, custom review pipelines, and local models, with implementation steps, security boundaries, and practical pros and cons.
Security
Secure Private-Key Handling on Acquia Cloud and Drupal
Store private keys outside your Drupal codebase using Acquia Cloud’s nobackup directory, resolve paths through settings.php, and validate, use, rotate, and recover credentials safely.
Audit Custom PHP Code with PHPCS Security Audit
Apply PHPCS security rules to custom Drupal modules and themes while excluding third-party code.
Audit Production npm Dependencies with GitHub Actions
Use npm audit in GitHub Actions to detect high-severity vulnerabilities in frontend packages shipped to production.
Scan the Current Checkout for Secrets with Gitleaks
Use Gitleaks in GitHub Actions to detect credentials and tokens in the current checkout without exposing findings.
Composer Dependency Audit with GitHub Actions
Audit locked PHP dependencies for known vulnerabilities and abandoned packages with Composer and GitHub Actions.
Set Up SMTP in Drupal with Your Company Email Server
A practical Drupal guide to sending site email through a company SMTP server, including SMTP module setup, credentials, TLS, SPF/DKIM/DMARC, testing, troubleshooting, and production safety.
Common GitHub Workflows for Code Scanning, Image Builds, Lighthouse, and Deployments
A practical guide to common GitHub Actions workflows: PHPCS, PHPStan, CodeQL, dependency review, Docker image builds, container scans, Lighthouse tests, smoke tests, and deployment gates.
Drupal CORS Configuration for APIs and Decoupled Applications
A practical guide to configuring Drupal CORS for JSON:API, REST, decoupled frontends, credentialed requests, preflight debugging, and secure production deployments.
How to Secure Drupal Forms Against Spam and Abusive Content
Build a layered Drupal form protection strategy with Honeypot, CAPTCHA, rate limiting, and a custom abusive-word validation service for contact forms.