Posts

Writing GitHub Actions Workflows With LLMs in October 2026: Pin Actions to Commit SHAs, Lock Down Token Permissions, and Lint Before You Merge

Image
Ask an LLM for a GitHub Actions workflow and you will get something that looks right in a few seconds: a trigger, a job, a checkout step, a build command. Most of the time it even runs. The problem is that CI configuration is one of the places where "it runs" and "it is safe" are very different things. A workflow holds secrets, can push code, can publish packages, and often runs on input from strangers who opened a pull request. Generated YAML tends to copy the patterns that are most common in public repositories, and a lot of those patterns are outdated or risky. This guide covers a practical way to use LLMs for writing workflows without inheriting those problems. The short version: pin every third-party action to a full commit SHA, set explicit and minimal GITHUB_TOKEN permissions, keep untrusted input out of shell scripts, and run a linter on every generated file before it merges. A CI pipeline is an assembly line: every step runs automatically, so every ste...

Writing Dockerfiles With LLMs in October 2026: Pin the Base Image, Use Multi-Stage Builds, and Scan the Result Before You Ship

Image
Ask a chat model for a Dockerfile and you will get one in seconds. It will usually build. That is the problem: a Dockerfile that builds is not the same as one you want running in production. Generated Dockerfiles tend to use floating base image tags, run as root, copy the whole repository (secrets included) into the image, and ship compilers and package caches nobody needs at runtime. This guide walks through a practical workflow for using LLMs to write and improve Dockerfiles without inheriting those habits. The short version: give the model real context, pin what you build on, insist on multi-stage builds and a non-root user, and let linters and scanners check the result before a human approves it. Photo: Shipping container stacks - Port of Rotterdam - 2014 - 2 by AgainErick, CC BY-SA 4.0 , via Wikimedia Commons Why generated Dockerfiles go wrong Models learned Dockerfiles from years of public examples, tutorials, and quick-start READMEs. Many of those were written to get so...

Seo Social Media Marketing

SEO Social Media Marketing: 7 Moves That Put Your Business Where the Money Is "Where there is money to be made, we will go!" That's not just our tagline. It's the operating principle behind every deal we touch at Santa Fe Capital Management — and it should be the operating principle behind your marketing, too. Here's the reality: your customers are searching right now. They're typing questions into Google. They're scrolling feeds. They're comparing options. And if your business doesn't show up in those search results and those social timelines, you don't exist to them. SEO social media marketing is the bridge between your business and the people who are already looking for what you sell. It's not a vanity game. It's not about likes. It's about being found, being seen, and closing the deal. This isn't a theory piece. This is a list of seven concrete moves you can make this quarter to turn search and social into revenue. ---...

Seo And Social Media Marketing

SEO and Social Media Marketing: 9 Direct Moves That Drive Revenue SEO and social media marketing get treated like two separate departments with two separate budgets. That is a mistake, and it costs you money. We run both channels side by side across a portfolio that includes real estate, web and mobile development, blockchain, and digital marketing. When search and social are aligned, rankings climb, feeds produce real leads, and deals close faster. We are not here to sell you on "brand awareness." We are here to show you where the money is. Here are nine moves that actually pay off. 1. Let SEO Keyword Data Dictate Your Social Calendar Stop guessing what your audience wants to see. Your search data already tells you — in plain numbers — what your customers are asking for. Pull the high-intent keywords from your organic performance. The terms with commercial intent, the long-tail questions, the local searches, the comparison queries. Then turn those into social posts. I...

Writing Database Migrations With LLMs in October 2026: Review the Generated SQL, Avoid Table-Locking Changes, and Test the Rollback Before Production

Image
Asking a model to "add a column for the customer's preferred language" or "split the name field into first and last name" gets you a migration file in seconds. It usually looks right. The trouble is that a migration is one of the few pieces of code that runs once, against your real data, often while live traffic is hitting the same tables. A subtle mistake does not show up as a failing test. It shows up as a locked table at peak hours, a backfill that silently writes nulls, or a rollback script that was never run and does not work. This guide covers a practical workflow for using LLMs to write schema migrations without trusting them blindly. The examples use PostgreSQL because its locking behavior is well documented, but the same habits apply to MySQL, SQL Server, and most migration tools such as Alembic, Flyway, Liquibase, Django migrations, Rails migrations, and Prisma Migrate. Give the Model the Real Schema, Not a Description of It The most common sourc...

Seo & Social Media Marketing

SEO & Social Media Marketing: The 7-Lever Playbook for Companies That Want Returns SEO & social media marketing is not a vanity project. It's not about collecting likes, patting yourself on the back, or impressing competitors at industry mixers. It's a revenue channel — and if you're not treating it like one, you're leaving money on the table. At Santa Fe Capital Management, we don't build brands for applause. We build assets that pay for themselves. That's why our digital marketing practice looks different from the polished agency down the street. We're a California-based conglomerate with active positions in real estate, web and mobile development, blockchain, derivatives trading, and digital marketing. We know what it costs to acquire a customer, what a deal is worth, and how fast capital needs to move. Here's the playbook we use when deploying SEO and social media marketing for our own ventures — and for operators who want the same kind of...

Writing Code Documentation With LLMs in October 2026: Generate Docstrings From Real Signatures, Run Every Example, and Catch Doc Drift in CI

Image
Most codebases have the same documentation problem: the docs that exist are out of date, and the functions that most need explaining have nothing at all. Language models are good at turning code into readable prose, so it is tempting to point one at a repository and ask it to "document everything." That works for about a week. Then the code changes, the generated comments stay put, and you have a new problem: confident documentation that is wrong. This guide covers a workflow that holds up over time. The model drafts, but the facts come from the code itself, every example is executed, and a CI check flags when code and docs stop agreeing. Photo: Clickety Clackety by Thad Zajdowicz, CC BY 2.0 , via Wikimedia Commons Decide what kind of documentation you actually need "Documentation" covers several different jobs, and a model handles them with very different reliability: Reference docs (docstrings, parameter and return descriptions, raised errors). These ...