Claim your blog

Record · corpus.blog/posts/01a08779-fde5-713c-9454-624e032ea176

Your editor is a supply chain security risk now

frenck.dev · published 26 May 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at frenck.dev Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 14
Words captured: 2,543

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

Investigation update: GitHub Enterprise Server signing key rotation Read at the source ↗

https://docs.pypi.org/trusted-publishers/

docs.pypi.org

https://packaging.python.org/en/latest/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/?ref=frenck.dev

packaging.python.org

https://docs.npmjs.com/trusted-publishers

docs.npmjs.com

https://docs.npmjs.com/staged-publishing?ref=frenck.dev

docs.npmjs.com

https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions

docs.github.com

https://docs.github.com/en/actions/security-for-github-actions/using-artifact-attestations/using-artifact-attestations-to-establish-provenance-for-builds

docs.github.com

https://neovim.io/

neovim.io

https://www.lazyvim.org/

lazyvim.org

https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w?ref=frenck.dev

github.com

https://unsplash.com/@cgower?utm_source=unsplash&utm_medium=referral&utm_content=creditCopyText

unsplash.com

https://unsplash.com/@markusspiske?utm_source=unsplash&utm_medium=referral&utm_content=creditCopyText

unsplash.com

https://tukaani.org/xz-backdoor/

tukaani.org