corpus.blog
41,554 blogs · 5,063,431 posts Claim your blog
Record · corpus.blog/posts/01a0875d-9196-7141-9a4b-29a0a9d5c2c9

My New Secure Baseline for GitHub

cedwards.xyz · published 11 April 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at cedwards.xyz Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
28
Words captured
2,544

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://github.com/torvalds/linux/blob/b4061a10fc29010a610ff2b5b20160d7335e69bf/drivers/hid/hid-samsung.c
github.com
https://github.com/actions/checkout/commit/70379aad1a8b40919ce8b382d3cd7d0315cde1d0
github.com
https://github.com/aquasecurity/trivy-action/tree/f685ba721536b1ff19093eb4e1b1bf994c2bdbe2
github.com
https://github.com/anchore/grype
github.com
https://github.com/aquasecurity/setup-trivy/pull/28
github.com
https://www.wiz.io/blog/trivy-compromised-teampcp-supply-chain-attack
wiz.io
Update: Ongoing Investigation and Continued Remediation Read at the source ↗
aquasec.com
https://snyk.io/articles/trivy-github-actions-supply-chain-compromise/
snyk.io
https://docs.github.com/en/code-security/concepts/supply-chain-security/immutable-releases
docs.github.com
https://github.com/github/roadmap/issues/592
github.com
Prioritizing security above all else Read at the source ↗
blogs.microsoft.com
https://checkmarx.com/blog/checkmarx-security-update/
checkmarx.com
https://docs.litellm.ai/blog/security-update-march-2026
docs.litellm.ai
https://telnyx.com/resources/telnyx-python-sdk-supply-chain-security-notice-march-2026
telnyx.com
https://www.aikido.dev/blog/teampcp-deploys-worm-npm-trivy-compromise
aikido.dev
https://github.com/cedws/template-go
github.com
https://github.com/cedws/homebrew-tap
github.com
https://github.com/cedws/scoop-bucket
github.com
https://docs.github.com/en/actions/concepts/security/artifact-attestations
docs.github.com
https://github.com/cedws/amnesia/attestations
github.com
https://github.com/sigstore/cosign
github.com
https://docs.sigstore.dev/logging/overview/
docs.sigstore.dev
https://github.com/zizmorcore/zizmor
github.com
https://github.com/woodruffw
github.com
https://github.com/google/osv-scanner
github.com
https://github.com/google/osv-scanner/issues/2714
github.com
https://en.wikipedia.org/wiki/XZ_Utils_backdoor
en.wikipedia.org
https://secretive.dev/
secretive.dev
Elsewhere on cedwards.xyz (1)