Explore >> Select a destination

You are here

 adnanthekhan.com
Release-Drafter To google/accompanist Compromise: VRP Writeup - Adnan Khan
| | securitylab.github.com
Keeping your GitHub Actions and workflows secure Part 3: How to trust your building blocks | GitHub Security Lab
35.7 parsecs away

Travel
| | In this article, well discuss sometimes less obvious attack vector whose code GitHub Actions are running.
| | arstechnica.com
Go Module Mirror served backdoor to devs for 3+ years - Ars Technica
47.6 parsecs away

Travel
| | Supply chain attack targets developers using the Go programming language.
| | www.nodejs-security.com
The XZ backdoor CVE-2024-3094: a JavaScript perspective
35.7 parsecs away

Travel
| | The XZ backdoor CVE-2024-3094 already happened in JavaScript 5 years ago but now the xz and liblzma malware bundled onto Linux distributions is bringing forth a world-wide threatening event in cybersecurity that jeopardizes the trust, sustainability and security concerns in the open-source ecosystem.
| | damienbod.com
Using Entra External ID with an Auth0 OpenID Connect identity provider | Software Engineering
104.7 parsecs away

Travel
| This post looks at implementing an Open ID Connect identity provider in Microsoft Entra External ID. Auth0 is used as the identity provider and an ASP.NET Core application is used to test the authentication. Microsoft Entra External ID federates to Auth0. Client code: https://github.com/damienbod/EntraExternalIdCiam Microsoft Entra External ID supports federation using OpenID Connect and was...