|
You are here |
sethmlarson.dev | ||
| | | | |
iliana.fyi
|
|
| | | | | [AI summary] The article critiques the use of the 'software supply chain' metaphor in open source maintenance, arguing that it dehumanizes the work and creates unnecessary burdens on hobbyist maintainers. | |
| | | | |
alpha-omega.dev
|
|
| | | | | [AI summary] Alpha-Omega has granted funds to the Homebrew project to enhance its security by implementing Sigstore attestations and achieving SLSA Build Level 2, ensuring secure verification of software packages. | |
| | | | |
openssf.org
|
|
| | | | | [AI summary] A grant-funded initiative enables Sigstore attestations for Homebrew packages to achieve SLSA Build Level 2 security and secure software supply chains. | |
| | | | |
blog.px.dev
|
|
| | | [AI summary] Pixie blog posts discuss topics such as exporting data in OpenTelemetry format, eBPF tracing, production observability, and anonymizing sensitive data while debugging. | ||