r0nan

5 ms·

1.
by r0nan 8mo ago
A few days ago I wrote about how the Trivy ecosystem got turned into a credential stealer. One of my takeaways was “pin by SHA.” Every supply chain security guide says it, I’ve said it, every subreddit says it, and the GitHub Actions harden
2.
by r0nan 8mo ago
So this is how Trivy got turned into a supply chain attack nightmare. On March 4, commit 1885610c landed in aquasecurity/trivy with the message fix(ci): Use correct checkout pinning, attributed to DmitriyLewen (who's a legit maint
3.
by r0nan 8mo ago
On March 19, 2026, someone (or some group) poisoned the Aqua Security Trivy ecosystem. A tool that thousands of organizations rely on to find vulnerabilities in their container images and configurations was quietly turned into a weapon that
4.
by r0nan 9mo ago
Imagine that Patrick Swayze is writing an SDK. He’s haunted by memories of ripping out a man’s throat for a nil pointer deference. To recoop, he sits down in his home office and begins writing a function to issue a new HTTP request to the A
5.
by r0nan 10mo ago
Utmost brings the timeless insights of Oswald Chambers' My Utmost for His Highest to your command line. It fetches the daily devotional entry from utmost.org and displays it with beautiful terminal styling—perfect for starting your day
6.
by r0nan 11mo ago
After a few years of writing open-source Terraform modules, I’ve picked up a few syntax tricks that make code safer, cleaner, and easier to maintain. These aren’t revolutionary, but they’re simple patterns that prevent common mistakes and m
7.
by r0nan 1y ago
A few weeks ago, something clicked. Why do we divide environments into development, staging, and production? Why do we have hot, warm, and cold storage tiers? Why does our CI/CD pipeline have build and test, staging deployment, and pro
8.
Terraform Testing with the Localstack Go Client(github.com)
1 points by r0nan 1y ago|1 comments
9.
by r0nan 1y ago
A Go client for managing LocalStack in testing environments.
10.
Terraform Proverbs(rosesecurity.dev)
1 points by r0nan 1y ago|0 comments
11.
The Neofetch of Terraform. Let your IaC flex for you(github.com)
2 points by r0nan 1y ago|0 comments
12.
Neofetch for Terraform(github.com)
1 points by r0nan 1y ago|1 comments
13.
by r0nan 1y ago
Terrafetch is the Neofetch of Terraform—because your infrastructure deserves a little flair. It scans your Terraform repository and displays key statistics like the number of variables, resources, modules, outputs, and more—all in a stylish
14.
by r0nan 2y ago
I’m curious what he means by Google changing and the Go project changing
15.
by r0nan 2y ago
Today, I’m tackling another silent killer: toil. It’s the invisible weight dragging teams down, forcing engineers to maintain instead of build. While some toil is inevitable, too much of it suffocates innovation and drives attrition. Let’s
16.
My team loved to ship fast and sink later(rosesecurity.dev)
10 points by r0nan 2y ago|6 comments
17.
Tight, Tight, Tight a Terraform Provider for Breaking Bad Quotes(github.com)
2 points by r0nan 2y ago|0 comments
18.
Terraform Proverbs(rosesecurity.dev)
2 points by r0nan 2y ago|1 comments
19.
by r0nan 2y ago
An homage to Go Proverbs
20.
An Extremely Practical Use for AI and Terraform(github.com)
1 points by r0nan 2y ago|1 comments
21.
by r0nan 2y ago
Here's the problem: You spin up a Terraform resource, pull a basic configuration from the registry, and start wondering what other parameters should be enabled to make it more secure and efficient. Sure, you could use tools like TLint
22.
Kuzco: Enhance your Terraform configurations powered by local LLMs(github.com)
2 points by r0nan 2y ago|0 comments
23.
Attacking America's Gas Stations(youtube.com)
1 points by r0nan 2y ago|0 comments
24.
Red-Teaming TTPs: Updated Guides, Cheatsheets, and a Facelift(github.com)
2 points by r0nan 2y ago|0 comments
25.
The Red-Teaming-TTPs repository is having a logo competition(github.com)
1 points by r0nan 2y ago|0 comments
26.
A utility for generating Mermaid diagrams from Terraform plans(github.com)
5 points by r0nan 2y ago|0 comments
27.
Nominate RoseSecurity for the GH Star program to advance open source research(stars.github.com)
1 points by r0nan 3y ago|0 comments
28.
Pre-Commit Hook to Create Jira Tickets from Git Commit History(gist.github.com)
3 points by r0nan 3y ago|1 comments
29.
Deploy C2 Redirectors at Scale with WolfPack(github.com)
1 points by r0nan 3y ago|0 comments
30.
Researcher Creates Open Source Sharing Platform for Cybersecurity Research(rosesecurityresearch.com)
7 points by r0nan 3y ago|0 comments

More ›