Tessera
Folgen

Paraxial.io

@paraxialio.bsky.social

Real Security for Developers - https://paraxial.io/

30 Posts106 Follower246 Folgt
Paraxial.io @paraxialio.bsky.social · 17h ago

If you are a software engineer frustrated that the cybersecurity ability of LLMs as hyped (best hacker in the world etc) do not match your own experience (frequently wrong, focused on pedantic issues, not finding true issues), this is the problem:

Paraxial.io @paraxialio.bsky.social · 3mo ago

@mtrudel.bsky.social and @peterullrich.com are making major security contributions to the security of the Elixir ecosystem. As AI models get more powerful this work is more important than ever, thank you!

Peter Ullrich@peterullrich.com · 3mo ago

The 5 vulnerabilities I found in Bandit were fixed and released today. Please go upgrade bandit ASAP. Thanks to @mtrudel.bsky.social for fixing them so quickly and to @maennchen.dev for managing the process 🙏 #ElixirLang cna.erlef.org/cves/

Philipp 🐘 keila.io@pentacent.bsky.social · 4mo ago

I just used zizmor to improve the security of our GitHub actions pipeline: github.com/pentacent/ke... Thanks to Michael from @paraxialio.bsky.social for the tip in the most recent @thinkingelixir.com episode! #myelixirstatus

Apply fixes suggested by zizmor · pentacent/keila@7eb6aeb

- Define clear permissions - Avoid templating vulnerabilities - Pin non-GitHub-provided actions (+ update all external actions) - Use persist-credentials: false - Use Docker build cache directly - ...

github.com