How to Build a Secure CI/CD Pipeline for Smart Contract Deployments

·1 views

A properly structured CI/CD pipeline for smart contracts must ensure that a single source commit passes every release gate and produces the exact artifact intended for deployment, according to a new developer tutorial. The guide integrates Foundry testing, Slither static analysis, and an audit-scope verification step, with any failed gate blocking the release entirely rather than logging a warning. A release manifest ties each build to a specific commit, compiler version, chain ID, and deployment script, preventing silent substitutions across jobs or teams. The pipeline defines six gates — covering reproducible builds, unit and fuzz tests, invariant campaigns, static analysis, audit scope, and deployment rehearsal — each with retained evidence and a named owner responsible for failures. The framework is designed to apply uniformly across internal teams and external contractors, ensuring no smart contract release advances without traceable, reproducible proof of compliance.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Why remote desktop tools are the wrong fix for in-room screen sharing

Remote desktop tools like AnyDesk and TeamViewer are routinely used in meeting rooms when an HDMI connection fails, but they were designed to control machines from a distance — not to share content with people standing nearby. Their core features, such as NAT traversal, relay servers, and one-to-one control sessions, solve problems that simply do not exist when everyone is in the same room. The mirroring model also falls short in group settings, where multiple people need to view a shared display rather than take turns controlling a single machine. Alternatives better suited to local screen sharing include Apple's built-in Sidecar for Mac and iPad users, and the open-source tool Deskreen, which streams a screen or window to any browser on the local network without requiring an account. Choosing the right tool comes down to recognising that in-room display needs and remote access needs are fundamentally different problems with different solutions.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

KXApp Lets Developers Build iOS Apps on Windows Without Installing Xcode

iOS development has traditionally required a Mac running Xcode, a setup that demands significant storage and restricts developers using Windows machines. A developer explored several alternatives — including VS Code with remote Mac compilation, CI platforms like Codemagic, and the now-discontinued AppCode — but found each had meaningful limitations for day-to-day coding. KXApp, a newer IDE, bundles its own iOS compilation and signing toolchain, removing the dependency on Xcode entirely and allowing real-device deployment in fewer steps. Built on a VS Code editor layer, it supports Swift, Objective-C, and Flutter projects, and handles incremental syncing to connected iPhones after code changes. Xcode is still considered superior for complex configurations, Storyboard editing, and deep performance analysis with Instruments, but KXApp is positioned as a lighter alternative for common development workflows.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Ninth Circuit Rules Amazon's CFAA Claims Weak Against AI Browser Acting for Users

Amazon filed a lawsuit in November 2025 against AI company Perplexity over its Comet browser, citing federal and California computer fraud statutes. A district court initially granted a preliminary injunction in March 2026, but the Ninth Circuit vacated it in August 2026. The appeals court found that because Perplexity's browser was operated by Amazon's own signed-in customers using software they had chosen, it did not constitute unauthorised access under computer-misuse law. The ruling is the first federal appellate decision on whether AI agents acting on behalf of users may access online platforms, though the panel stressed it was ruling on the specific record rather than setting broad doctrine. Contract, trademark, and state-law claims were not addressed, and the court noted that different facts — such as agents operating at large scale without authentication — could yield a different outcome.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Apply Threat Modeling Principles to LLM Tool-Calling Systems

As large language models gain the ability to call external tools, security researchers are urging developers to treat the context window as an untrusted input and apply least-privilege design principles. Each tool exposed to a model should be evaluated for what data it reads, what it modifies, and who has authorized its use. Credentials should be scoped per invocation rather than per deployment to prevent an agent from accumulating the permissions of all users it serves. Irreversible actions, such as deleting production data, should require out-of-band confirmation that the model itself cannot generate. Full tool-call payloads, not model-generated summaries, should be logged to ensure reliable audit trails during investigations.

0 comments Read more at DEV Community