鈴木たかのり （@takanory） です。今月の 「Python Monthly Topics」 では、Pythonのパッケージを公開するときに、デジタル証明書 （Digital attestations） を用いてより安全に公開する方法について紹介します。 PEP 740の提案とその背景 この機能はPEP 740によって2024年1月 ...
GitHub announced updates to its Advanced Security platform after it detected over 39 million leaked secrets in repositories during 2024, including API keys and credentials, exposing users and ...
Many open-source repositories contain privileged GitHub Actions workflows that execute untrusted code and can be triggered by attackers to expose credentials and access tokens, as MITRE and Splunk ...
It's not such a happy Monday for defenders wiping the sleep from their eyes only to deal with the latest supply chain attack.… StepSecurity disclosed a compromise of the popular GitHub Action ...
App development teams who use a popular utility in the GitHub Actions continuous integration and continuous delivery/deployment (CI/CD) platform need to scrub their code because the tool was ...
一部の結果でアクセス不可の可能性があるため、非表示になっています。
アクセス不可の結果を表示する