Language

dig with +short strips everything but the answer.

Forwards a local port through a bastion so a client can connect as if the database were local.

Adds the third field of every line and prints the total, ignoring anything non-numeric.

ripgrep finds the files, sed edits them in place. The dry run first is not optional.

jq for the common cases: reformat, pick a path, filter an array, and reshape.

Sorts on the second column and keeps the first row of each group.

grep -o prints only the matching part, which turns grep into a crude extractor.

For session keys and tokens. Never reach for a password generator or a UUID for this.

Ed25519 rather than RSA: shorter, faster, and no key-size decision to get wrong.

Verifies a download actually matches what the publisher signed, rather than trusting the transfer.

Caret ranges are how a build that passed last week fails today. Exact versions plus a lockfile remove the surprise.