ethanblackburn

4 ms·

1. 1.▲
   by ethanblackburn 10mo ago

   Fair points — this isn’t a preventative control and it doesn’t “lock down” your CI. If an attacker has your NPM token, you’ve already been pwned. The goal is to stop the spread. This will quickly unpublish a library and alert you, so no one
2. 2.▲
   Show HN: Auto-Unpublish NPM Packages Published Outside CI(github.com)

   6 points by ethanblackburn 10mo ago|2 comments
3. 3.▲
   by ethanblackburn 11mo ago

   Thank you! It was a lot of fun to build
4. 4.▲
   Show HN: Tangent – Security log pipeline powered by WASM(github.com)

   28 points by ethanblackburn 11mo ago|2 comments
5. 5.▲
   Tangent: Stream processing with WASM at near-native speed(github.com)

   11 points by ethanblackburn 11mo ago|0 comments
6. 6.▲
   Show HN: Build Your Own Security Lake – Open-Source OCSF Converters to S3(github.com)

   3 points by ethanblackburn 2y ago|0 comments