menu

Recent posts tagged lazysre

sachincool • Jun 7 • in Articles • 8 min read
Lazy SRE's guide to secure systems, part 2: the actions you didn't pin
Originally published at harshit.cloudhttps://harshit.cloud/blog/lazy-security-part-2-github-actions on 2026-04-12. Last March, someone with write access to the trivy-action repo rewrote 76 of its 77 version tags in place. The tags still resolved t...
post-cover-19914
  • security
  • lazysre
  • githubactions
  • supplychain
0 Reactions 0 Comments
sachincool • Jun 7 • in Articles • 7 min read
Lazy SRE's guide to secure systems, part 1: the dependencies you didn't read
Originally published at harshit.cloudhttps://harshit.cloud/blog/lazy-security-part-1-supply-chain on 2026-04-05. A few months ago a friend's CI pipeline tried to install a package none of us had heard of. The build failed. The error wasn't a missi...
post-cover-19913
  • security
  • lazysre
  • supplychain
  • npm
2 Reactions 1 Comments
Tom Smithverified • 1 day • in Articles • 9 min read
Developer Weekly Briefing — October 30, 2026
Security dominated this week, but not in the usual way. Two active campaigns turned GitHub configuration files into attack surfaces. Researchers demonstrated that the built-in browsers inside AI coding tools can read your SSH keys. And at Oracle AI ...
post-cover-33104
  • agenticai
  • devsecops
  • github
  • localai
7 Reactions 6 Comments
To see more, click for the full list of posts or popular tags.
chevron_left
🔥 2 posts • 👩‍💻 1 active writers
✨ Want to write in this topic?
Share your learning. Get discovered. Build your profile.
Join CoderLegion
💡 Why developers use CoderLegion
Track learning • Share posts • Get ranked publicly
Create your profile