Explore >> Select a destination

You are here

 github.blog
Security best practices for authors of GitHub Actions - The GitHub Blog
| | openssf.org
xz Backdoor CVE-2024-3094 - Open Source Security Foundation
3.0 parsecs away

Travel
| | [AI summary] A backdoor vulnerability (CVE-2024-3094) was discovered in the xz package, allowing potential remote system compromise through compromised software supply chain practices.
| | securitylab.github.com
Keeping your GitHub Actions and workflows secure Part 3: How to trust your building blocks | GitHub Security Lab
0.7 parsecs away

Travel
| | In this article, well discuss sometimes less obvious attack vector whose code GitHub Actions are running.
| | semgrep.dev
Giving AppSec a Seat at the Vibe Coding Table | Semgrep
3.8 parsecs away

Travel
| | "Coding vibes great, security vibes... kinda bad." - AppSec teams watching everyone use Cursor right now
| | alarmingdevelopment.org
Open source is stifling progress - Alarming Development
15.0 parsecs away

Travel
| My previous post lamented the Great Software Stagnation. We could blame technology lock-in effects (the QWERTY syndrome). We could also blame civilization-wide decadence: the Great Stagnation that ...