Skip To Main Content
Zia Ullah on Muck Rack

Zia Ullah

Chittagong
As seen in: Dailymotion, Illumination, Medium, Nature, Wiley Online Library, PLOS ONE, Journal of Retailing and Consumer Services, MDPI, ACS Publications, Royal Society of Chemistry and
FCA(ICAP), Odoo certified consultant, Certified QB Proadvisor, IFRS (ICAEW). Senior Partner ZMK - gmn member firm; FM trainer| RTs are not endorsements

Get in touch with Zia

Contact Zia, search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Articles

Shift Left Security: 4 Automated Security Gates in GitHub Actions

|
By Zia Ullah
| DevOps.com
TL;DR — Key Takeaways Add four automated security gates to every push and pull request. Use npm audit and Snyk to detect vulnerable Node.js dependencies before release. Scan containers with Trivy and analyse application code with CodeQL. Run OWASP ZAP against the live application after the first three checks pass. Document false positives with owners, reasons and expiry dates rather than disabling security controls.
Open in Who Shared Issue with article?

How to Build an AI Agent with Function Calling in Node.js Using Google Gemini

|
By Zia Ullah
| freeCodeCamp
Last year, a client asked me to add a conversational interface to their internal reporting tool. Staff would type a question, and the system would pull a live answer from the database. I had the first version running in a day. Single questions worked. But a week in, a tester typed: "What is the weather in Berlin, and how much would 500 EUR convert to in USD right now?" The model called the weather function, returned that answer, and ignored the second half of the question entirely.
Open in Who Shared Issue with article?

How to Build a Multi-Tenant SaaS API with Node.js, RBAC, and Audit Logging

|
By Zia Ullah
| freeCodeCamp
A colleague asked me to help debug what looked like a permissions issue in their SaaS project management tool. Users were seeing resources they hadn't created. I pulled up the query logs expecting something subtle. It was not. The list endpoint had no tenant_id filter at all. Every tenant in the database could read every other tenant's projects. The application never threw an error. It just returned whatever was there. Missing tenant filters don't throw errors.
Open in Who Shared Issue with article?
See all 129 licensed articles (133 Total)