Record · corpus.blog/posts/01a0b5c5-1f1b-7166-87d6-7a9b56e81139

Open source security at Astral

astral.sh · published 8 April 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at astral.sh Wayback capture

4blogs citing

First cited: 24 Apr 2026
Most recent: 31 Aug 2026
Rank this month: not ranked
Links from this post: 49
Words captured: 3,288

Cited by

Blog

In the post

Date

Blogs - Data Engineering Blog & Second Brain

Open Source (OSS): Advantages, Challenges, and AI Read at the source ↗

31 Aug 2026

Python Software Foundation

Everything Security at PyCon US 2026 Read at the source ↗

17 Jun 2026

writethatblog.substack.com

writethat.blog Recap [April 2026] Read at the source ↗

6 May 2026

Jamie Tanna

A deep dive into the wild world of GitHub Actions' tagging formats Read at the source ↗

24 Apr 2026

Links from this post

Link

Host

https://github.com/aquasecurity/trivy/discussions/10425

github.com

https://docs.litellm.ai/blog/security-update-march-2026

docs.litellm.ai

https://github.com/astral-sh/uv

github.com

Linklog | astral-sh/ty: An extremely fast Python type checker and language server, written in Rust. Read at the source ↗

github.com

https://github.com/features/actions

github.com

https://openssf.org/blog/2024/08/12/mitigating-attack-vectors-in-github-workflows/

openssf.org

https://blog.yossarian.net/2024/12/06/zizmor-ultralytics-injection

blog.yossarian.net

https://www.legitsecurity.com/blog/github-actions-tj-actions-changed-files-attack

legitsecurity.com

https://www.stepsecurity.io/blog/supply-chain-security-alert-popular-nx-build-system-package-compromised-with-data-stealing-malware

stepsecurity.io

https://securitylab.github.com/resources/github-actions-preventing-pwn-requests/

securitylab.github.com

https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-commands

docs.github.com

What the fork? Imposter commits in GitHub Actions and CI/CD Read at the source ↗

chainguard.dev

https://docs.zizmor.sh/audits/

docs.zizmor.sh

https://github.com/acj/freebsd-firecracker-action/pull/5

github.com

https://github.com/zizmorcore/zizmor

github.com

https://github.com/suzuki-shunsuke/pinact

github.com

https://en.wikipedia.org/wiki/Time-based_one-time_password

en.wikipedia.org

https://gist.github.com/woodruffw/643a6cf70ad72d404ce6f9f333181cf8

gist.github.com

https://github.com/apps/astral-sh-bot

github.com

https://gidgethub.readthedocs.io/en/latest/

gidgethub.readthedocs.io

https://github-app-tutorial.readthedocs.io/en/latest/creating-github-app.html

github-app-tutorial.readthedocs.io

https://pypi.org/

pypi.org

https://brew.sh/

brew.sh

https://github.com/orgs/astral-sh/packages

github.com

https://repos.openssf.org/trusted-publishers-for-all-package-repositories.html

repos.openssf.org

https://crates.io/

crates.io

https://www.npmjs.com/

npmjs.com

https://github.com/astral-sh/uv/attestations

github.com

https://docs.github.com/en/code-security/concepts/supply-chain-security/immutable-releases

docs.github.com

https://www.wiz.io/blog/trivy-compromised-teampcp-supply-chain-attack

wiz.io

The Monsters in Your Build Cache - GitHub Actions Cache Poisoning Read at the source ↗

adnanthekhan.com

https://docs.github.com/en/actions/how-tos/deploy/configure-and-manage-deployments/manage-environments

docs.github.com

https://github.com/open-security-tools/ost-environment-gate

github.com

https://docs.github.com/en/actions/how-tos/deploy/configure-and-manage-deployments/create-custom-protection-rules

docs.github.com

https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/about-rulesets

docs.github.com

https://docs.astral.sh/uv/getting-started/installation/

docs.astral.sh

https://github.com/astral-sh/uv-pre-commit

github.com

https://github.com/astral-sh/ruff-pre-commit

github.com

https://github.com/astral-sh/uv/pull/18280

github.com

https://github.com/dependabot

github.com

https://docs.renovatebot.com

docs.renovatebot.com

We should all be using dependency cooldowns Read at the source ↗

blog.yossarian.net

https://docs.astral.sh/uv/concepts/resolution/

docs.astral.sh

https://github.com/apache/opendal-reqsign/pull/687

github.com

https://www.pypa.io/en/latest/

pypa.io

https://devguide.python.org/developer-workflow/psrt/

devguide.python.org

https://github.com/astral-sh/python-build-standalone

github.com

Announcing the Astral OSS Fund Read at the source ↗

astral.sh

https://peps.python.org/pep-0740/

peps.python.org