Skip to main content

Xianpeng Shen

Hi 👋, I’m Xianpeng
#

DevOps & Build Engineer | Python Enthusiast | Open Source Maintainer


pip vs pipx Differences

pip vs pipx Differences

·418 words·2 mins
This article introduces the differences between pip and pipx, helping developers choose the right tool to manage Python packages and command-line tools.
Code Signing

Code Signing

·701 words·2 mins
This article introduces the concept and importance of code signing, along with a comparison of two common code signing tools, emphasizing its role in software supply chain security.
Witness and SLSA 💃

Witness and SLSA 💃

·954 words·2 mins
This article introduces the concept and working mechanism of Witness, and how to use Witness to generate and verify the provenance of software artifacts, emphasizing its importance in improving software supply chain security.
2021-22 World Quality Report (WQR)

2021-22 World Quality Report (WQR)

·1692 words·4 mins
This article presents the key findings and trends from the 2021-22 World Quality Report (WQR), highlighting the impact of the COVID-19 pandemic on software quality and testing, and the crucial role of QA in Agile and DevOps.
Polaris - Static Code Analysis

Polaris - Static Code Analysis

This article introduces the basic concepts of Polaris, the supported programming languages, how to use the SaaS platform, and how to configure and run Polaris for static code analysis. It also provides example YAML configuration files and how to view the analysis results.
About Code Coverage

About Code Coverage

·839 words·4 mins
This article briefly introduces the concept, importance, common metrics, working principle, and mainstream tools of code coverage, emphasizing that code coverage metrics should not be over-relied upon.
Branch Naming Convention

Branch Naming Convention

·205 words·1 min
This article introduces the conventional branch naming specification, including the purpose of branch names, key points, and basic rules for naming branches in Git. It also provides examples of branch prefixes and their meanings.
Jenkins Top 3 best practice

Jenkins Top 3 best practice

·906 words·5 mins
Discusses three best practices for Jenkins: Configuration as Code, Shared Libraries, and Multi-Branch Pipeline, highlighting their benefits in terms of transparency, traceability, and self-service builds.