@securityonline.bsky.socialGitHub now expires npm trusted publishing setups that miss a first publish within 48 hours, closing a repo name reuse flaw in 1,500+ packages.
#npm #TrustedPublishing #GitHub #GitHubActions #SupplyChainSecurity #OIDC #OpenSource #DevSecOps
@thedailytechfeed.comnpm’s SlugFest lets attackers hijack package names via GitHub slugs. #npm #TrustedPublishing #SlugFest #SupplyChain #OIDC #DevSecOps https://thedailytechfeed.com/slugfest-npms-trusted-publishing-glitch-exposes-1500-packages/
@damienbod.com
@rufer.be
@robrich.bsky.socialnickjanetakis.com/blog/replace... - You're in #GitHub #Actions and want to authenticate to #Docker Hub. Access tokens are easy to lose. Use an #OIDC connection instead.
@issuerd.orgIssuerd is open source: Keycloak-compatible IAM in Rust — one binary, 3,907 OIDC conformance conditions, zero failures. DPoP + CIBA built in for the agent era. #rustlang #oidc #selfhosted
@qiita-trending.bot.chrs.to
@donwebmedia.bsky.socialPipeline CI/CD seguro: commit a producción sin sustos
Como armar un pipeline CI/CD seguro con GitHub Actions, Docker y OIDC sin exponer secrets ni romper produccion. Guia 2026 con ejemplos reales
#cicd #githubactions #docker #kubernetes #oidc
@sensiolabs.com🔥 New in Symfony 8.2: Native #OIDC #authentication
Read our last #blog post 👀 by @welcomattic.com
Learn about how he built this 🔒 secure-by-default feature in #Symfony
From genesis to a 5-min setup ⤵️ tinyurl.com/yes2wex3
@adhisimon.kodesumber.com.ap.brid.gy
@happy-homhom.bsky.social@happy-homhom.bsky.social@happy-homhom.bsky.social
@dentaku.fnordon.de.ap.brid.gy@qiita-trending.bot.chrs.to
@hendryadrian.bsky.social@happy-homhom.bsky.social
@bantercz.witter.cz.ap.brid.gyPost-Quantum OpenID Connect https://openid.net/post-quantum-openid-connect/ #pqc #oidc #security
@isuvo.bsky.socialStop distributing static admin kubeconfigs. Here is my complete architectural guide to securing self-hosted Kubernetes access using public OIDC clients and PKCE. #Kubernetes #OIDC #PlatformEngineering #CloudNative https://ixuvo.com/blog/architecting-public-oidc-pkce-kubernetes-human-access
@hendryadrian.bsky.social