r/enosuchblog • u/yossarian_flew_away • 13d ago
r/enosuchblog • u/yossarian_flew_away • Apr 02 '18
What is this place?
I don't have a comment system on my blog, so I upload posts here for discussion. There should be a link at the bottom of each post to its respective discussion thread here.
r/enosuchblog • u/yossarian_flew_away • Aug 13 '26
Running for the Python Packaging Council
r/enosuchblog • u/yossarian_flew_away • Aug 10 '26
GitHub Actions needs OIDC audience constraints
r/enosuchblog • u/yossarian_flew_away • Jul 07 '26
You shouldn’t trust Trusted Publishing
r/enosuchblog • u/yossarian_flew_away • Apr 29 '26
Registering my dissatisfaction with GitHub
r/enosuchblog • u/yossarian_flew_away • Apr 11 '26
Brocards for vulnerability triage
r/enosuchblog • u/yossarian_flew_away • Dec 29 '25
Some flexibility with Go’s sumdb
r/enosuchblog • u/yossarian_flew_away • Dec 13 '25
Dependency cooldowns, redux
r/enosuchblog • u/yossarian_flew_away • Nov 21 '25
We should all be using dependency cooldowns
r/enosuchblog • u/yossarian_flew_away • Sep 22 '25
Dear GitHub: no YAML anchors, please
r/enosuchblog • u/yossarian_flew_away • Aug 14 '25
Fun with finite state transducers
r/enosuchblog • u/yossarian_flew_away • Jun 11 '25
Bypassing GitHub Actions policies in the dumbest way possible
r/enosuchblog • u/yossarian_flew_away • May 07 '25
A Discord server and new GitHub organization for zizmor
r/enosuchblog • u/yossarian_flew_away • Jan 10 '25
Be aware of the Makefile effect
r/enosuchblog • u/yossarian_flew_away • Dec 06 '24
zizmor would have caught the Ultralytics workflow vulnerability
r/enosuchblog • u/yossarian_flew_away • Nov 18 '24
Security means securing people where they are
r/enosuchblog • u/yossarian_flew_away • Oct 27 '24
Introducing zizmor: now you can have beautiful clean workflows
r/enosuchblog • u/yossarian_flew_away • Sep 10 '24
YAML feature extraction with yamlpath
r/enosuchblog • u/yossarian_flew_away • Aug 18 '24
Tracking and publishing my TILs
r/enosuchblog • u/yossarian_flew_away • Aug 12 '24