-
## What is the Problem Being Solved?
Clean up CI tech debt to [avoiding duplication](https://docs.github.com/en/actions/sharing-automations/avoiding-duplication), finishing what we started 4y ago
…
leotm updated
1 month ago
-
### Description
The `hardeningDisable` argument to `stdenv.mkDerivation` should also be able to be used as an environment variable. This is according to the official [documentation](https://nixos.…
-
using [checksec](https://github.com/slimm609/checksec.sh) we can found out that the default build doesn't have RELRO/CANARY/PIE,
```
checksec --file=v2ray-plugin_linux_amd64
RELRO STACK C…
-
#### Description of problem:
Apply to the rule `sshd_disable_gssapi_auth` (And may likely also concern other `sshd_*` rules checking `/etc/ssh/sshd_config`)
This rule check that `GSSAPIAuthentic…
-
There is a conflict when deploying both "policies/ACSC Windows Hardening Guidelines.json" and "policies/Windows Security Baseline (for use with ACSC Windows Hardening Guidelines).json" to Intune. They…
-
We agreed on #1175 to open an issue to follow up a discussion about this requirement for Node.js (cc: @mhdawson @ljharb @RafaelGSS)
> The project website, repository (if accessible via the web), an…
-
Very often administrators want to know how the directory permissions of Nextcloud should be set best. I searched the Nextcloud documentation for information about it, but couldn't find a chapter cover…
j-ed updated
8 months ago
-
## Background Information
Per https://github.com/18F/tts-tech-portfolio-private/issues/947#issuecomment-706273874, "DockerHub…will not be providing any security information nor do they seem to do s…
afeld updated
1 month ago
-
ModSecurity is a widely known Apache2 module that acts as a web application firewall.
Providing official guidance on how to set up modsec to work properly with Nextcloud would further enhance Nextc…
-
## Why
A bad actor can force push a tag so that GitHub Action to do some malicious actions.
A bad actor can push a malicious container image under the same name.
## What
We should use dige…