Stories by woodruffw

Auditing RubyGems

Zizmor would have caught the Ultralytics workflow vulnerability

Zizmor: Static Analysis for GitHub Actions

Workbrew makes open-source package manager Homebrew enterprise-friendly

Security means securing people where they are

Attestations: A new generation of signatures on PyPI

Show HN: Zizmor, static analysis for GitHub Actions

Zizmor: A static analysis tool for GitHub Actions

YAML Feature Extraction with Yamlpath

Signatures Are Like Backups

Tracking and Publishing My TILs

Approximating sum types in Python with Pydantic

Debugging running Python scripts with PDB via GDB

Hiding messages in x86 binaries using semantic duals

Homebrew Security Audit

Quantum is unimportant to post-quantum

Apple's PCC: Bold step forward, not without flaws

Python wheel filenames have no canonical form

A peek into build provenance for Homebrew

Two New LMS Libraries

1
2
3
4
5
6
7
8
9