#ci

12 posts · Last used 13d

For 4,5 years anyone could add rogue JavaScript to build log page by submitting a builds.sr.ht job with OSC 8 escape codes. The attacker could submit build jobs on behalf of the victim viewing the build logs, up to even deploying rogue software on the flagship instance. Curious? Read about the whole journey here: https://blog.arusekk.pl/posts/srht-account-takeover/ #cve_2026_92973 #srht #sourcehut #xss #security #osc8 #ansiescape #ci #vulnerability
2
0
2
0
Cienで成人向けゲームを制作しています。新しい記事を公開しました!
64
0
30
0

Let's try this: Anyone interested in #hiring me?

Experience:

Excel at:

Links in profile

Boosts appreciated!

#openToWork #fediHire #getFediHired

15
10
111
0

I've been considering Argo Workflows for my CI/CD jobs lately. It feels better than Forgejo Actions in the following ways:

  • I can create workflows with some privileges (like creating user namespaces) without going "--privileged". It is not as "on/off" as it can be with Forgejo Actions, because you can express complex securityContexts;
  • the workflows manifests may not be part of the code repository, which squelch a whole world of possible attach vectors;
  • secrets can be mounted on the need-to-know basis, per container instead of having all secrets possibly exposed as soon as you have write permissions on the repository and the right to run a pipeline.

Am I missing something?

#devops #ci #argoCD

0
0
0
0
News Headlines | How the State ends up fining itself over derelict sites AI generated summary, Read the full article for complete information. RT É Investigates found that Ireland’s derelict‑sites registers expose a paradox in which the State is effectively fining itself: out of roughly 2 500 listed properties, a significant share are owned by public bodies such as the HSE, CIÉ, the Office of Public Works and the Department of Education, which have collectively incurred hundreds of thousands of euros in levies for buildings left to decay—from a boarded‑up former health centre in Laois to abandoned HSE premises in Dublin and Wexford, long‑neglected railway properties owned by CIÉ, and vacant school sites held by the Department of Education. The report shows that many of these sites have remained derelict for years despite repeated complaints and promised redevelopment plans, while the levy system forces one arm of the State to charge another, recycling public money without visible progress. Similar problems appear in charities and Catholic organisations that hold derelict housing, and the investigation calls for a transparent, national derelict‑sites register to better identify and address the systemic failures that allow public‑owned decay to persist. Read more: https://www.rte.ie/news/investigations-unit/2026/0602/1575784-left-to-rot-how-the-state-ends-up-levying-itself/ #RT #HSE #CI #OPW #rtinvestigates
0
0
0
0
I see that there is a growing need for a GitHub alternative specifically for SMBs and single devs where setting up a self hosted alternative would be a too large investment. For me this sounds like an ideal application of the Coop (Genossenschaft), where the SMBs are the shareholders. Germany specifically has a couple of good working examples of this (a co-op owned by SMBs) I'll need a handful of initial co-conspirators to start a discussion. Let me know if you're interested. #GitForges #CI
17
48
10
1
You've seen all posts