MJ Milan Jovanović
Blog

Turning off PR CI: local gate with gh-signoff and a required status

Milan Jovanović describes turning off cloud CI for pull requests, running the build and tests locally, and posting a signoff commit status with the gh-signoff GitHub CLI extension. A git pre-push hook runs the gate, a GitHub ruleset requires the status before merging, and one cloud run stays on merges to main. It is a practical option for .NET teams that want to cut Actions costs and waiting time.

How to Revoke a JWT Before It Expires in ASP.NET Core

ASP.NET Core validates a JWT by its signature and expiry, so a stolen token keeps working after a password change. The article walks through two fixes: short-lived access tokens paired with revocable refresh tokens, then a token_version check for immediate revocation. Every .NET developer running JWT-based APIs should know where the gap is and what each fix costs.