February 2023 Summaries

This blog post discusses how to sign commits on Gitpod using 1Password and SSH key signing. It explains the importance of commit signing in securing the software supply chain and provides a step-by-step guide for setting up 1Password's SSH Agent and SSH Key Management. The process involves installing 1Password, enabling its SSH Agent, configuring local SSH settings, generating an SSH key, adding it to Gitpod and GitHub, and finally testing the commit signing in a Gitpod workspace using VS Code Desktop. Additionally, the post suggests using Dotfiles for automatic commit signing in every repository with Gitpod.

Securely managing and rotating development secrets is crucial for maintaining good secret hygiene across teams. Gitpod Variables allow users to set and inject environment variables into workspaces, ensuring that API keys, passphrases, and certificates are available within developer environments. However, larger teams may face challenges in maintaining consistency around which secrets are required for which project and rotating them. Doppler is a SecretOps platform that allows sharing and syncing of developer secrets across all environments, making it easier to manage and rotate keys without any interaction from developers. By using Gitpod Variables and Doppler together, teams can consistently enforce secrets management across entire organizations and maintain good secret hygiene.

Gitpod recently hosted its first in-person community meet-up in Paris, France. The event was organized by Hero Jean-Phi Baconnais and featured lightning talks from various contributors who shared their use cases and demos of using Gitpod. The company is now encouraging others to host local meet-ups in their cities, offering support such as spreading the word, providing swag for attendees, a budget for food and beverages, and even having a Gitpodder attend to give a talk or provide in-person support. These meet-ups aim to connect with users and foster real life connections within the primarily virtual community.