Stories by woodruffw

Making PyPI's test suite 81% faster

A New ASN.1 API for Python

Any program can be a GitHub Actions shell

Open Tech Fund vs. Kari Lake [pdf]

Benchmarking OpenSearch and Elasticsearch

When NULL isn't null: mapping memory at 0x0 on Linux

Don't Recurse on Untrusted Input

Homebrew's new Git signing key

PyPI Now Supports Project Archival

GitHub Actions is surprisingly case-insensitive

Zizmor 1.0

Auditing RubyGems

Zizmor would have caught the Ultralytics workflow vulnerability

Zizmor: Static Analysis for GitHub Actions

Workbrew makes open-source package manager Homebrew enterprise-friendly

Security means securing people where they are

Attestations: A new generation of signatures on PyPI

Show HN: Zizmor, static analysis for GitHub Actions

Zizmor: A static analysis tool for GitHub Actions

YAML Feature Extraction with Yamlpath

1
2
3
4
5
6
7
8