http://peti.to/tags/devops/Recent content in DevOps on Ben PetitoHugo -- gohugo.ioenMon, 27 Jul 2026 09:00:00 +0930http://peti.to/posts/the-tyranny-of-the-default/Mon, 27 Jul 2026 09:00:00 +0930http://peti.to/posts/the-tyranny-of-the-default/<p>This term was coined by Steve Gibson on his <a href="https://www.grc.com/securitynow.htm" target="_blank" rel="noopener">Security Now</a> podcast many years ago. Steve realised that most people will never touch or change the default settings/options that come with any software. As part of delivering custom software solutions to our customers, this is something I think about fairly often, as the choices we make, while we give our customers levers to pull, rarely get changed.</p> <p>I tripped over this last week in a slightly different situation while investigating for a customer what static analysis and CVE detection was in place for their application. We use GitHub for almost all of our projects and have a mature, well-worn CI pipeline (the thing that builds the application and runs checks and tests when new code is pushed). But for this customer, we host it in their Bitbucket repository.</p>