-
On HackerNews and Reddit, someone was complaining that a publicly available "Minecraft" image (minecraft101/minecraft-server) was actually a Monero miner. The reports are at https://www.reddit.com/r/d…
-
## Problem/Question
Hi, I was wondering if I could join a meeting on this project or contact with the maintainers to explore adding some content to the project. GitHub's security tools are free…
-
Would be great if you could release JARs to Maven Central. Any plans to do so?
-
Hi,
On behalf of Docker, attached is our response as part of the current public comment period for the Report on Federal IT Modernization. For any questions or requests for clarification on this co…
-
### System information
Supply-chain Levels for Software Artifacts (SLSA V1.0) [Level 2](https://slsa.dev/spec/v1.0/levels#build-l2) requires to have digital signatures on build artifacts, such as P…
-
Some of the links we tracked in 2021 and 2020, i am guessing there are many more. We need find the right place to plug them in.
2021
https://github.com/faisalman/ua-parser-js/issues/536
https://j…
-
**Doc:** https://docs.google.com/document/d/1iWjO4UGcGm0PeCm9mbqeT-PiD4z4S7qXMaZsGIFUn0s/edit
**Presentation:** https://docs.google.com/presentation/u/0/d/1oQoJYy9aCGvnEi43NtgSEfuw3IZbYRuapKFrwSceudA…
-
Hey @tonybutt – Congratulations, your Final Project passed! We'll be approving it on the course itself in a week or two, but here's your feedback in the meanwhile:
### Frontend
- Good to have ei…
-
# Summary
This proposal describes Reference Value Provider Service, a key component to generating reference value, which handles different provenances, extracts reference value, and sends it to Attes…
-
Talked about in out 9/27/2022 call, Francis suggested we build/find tools/automation that can help maintainers and others implement suggestions in CVD guides