Collaborate Disseminate
I’m currently attempting to pentest a web application created by a relation, who wanted me to find vulnerabilities and to let him know what exploits would be possible with said vulnerabilities.
I have discovered the .git folder is publicly… Continue reading Why are certain hashes missing from the .git objects folder?
A discussion of some of the best DevOps automation tools for developers and DevOps engineers. Learn more about automation software and platforms. Continue reading Top DevOps Automation Tools
In this How to Make Tech Work tutorial, Jack Wallen demonstrates how to install Git on macOS. Continue reading How to Install Git on macOS (+Video Tutorial)
Git has been a powerful tool for software development and version control since the mid ’00s, gaining widespread popularity since then. Originally built by none other than Linus Torvalds for …read more Continue reading Too Much Git? Try Gitless
I’m looking at using either git-crypt or transcrypt to "transparently" encrypt a few secret files in a private github repository, using a symmetric key.
Separate from the debate of whether this should actually be done or not, I a… Continue reading Is git-crypt or transcrypt more secure?
We are looking to introduce signing of commits into our company.
Currently we are leaning towards using GPG kays, but we can consider SSH if what we want cannot be achieved with GPG.
We are using a private Gitlab instance.
What we need:
We… Continue reading Managing signed commits as an organization
Booby-trapped app, apparently signed and shipped by 3CX itself after its source code repository was broken into. Continue reading Supply chain blunder puts 3CX telephone app users at risk
Booby-trapped app, apparently signed and shipped by 3CX itself after its source code repository was broken into. Continue reading Supply chain blunder puts 3CX telephone app users at risk
I’m a software developer and our entire code of the project is stored in a single git repository. A small part of this now needs to be made available to a customer. He does not need to push to the repo nor does he need to pull currently. I… Continue reading Is git sparse-checkout secure?
GitHub Blog: https://github.blog/2023-01-17-git-security-vulnerabilities-announced-2
Git has 3 new Remote Code Execution vulnerabilities.
It’s said in the blog that Git was already patched by version 2.39.1. But, I don’t think they explici… Continue reading Git Remote Code Execution vulnerabilities as of January 17, 2023