Makers of open source and free-to-use tools for AI-curious developers. Find our most recent project here: https://nitter.cf/t.co/OpQTkZ1cge
Remote and asynchronous
Joined April 2023
- Tweets404
- Following74
- Followers549
- Likes288
Stacklok retweeted
A look at four ways that AI is reshaping hacking and malware development, and how we can stay vigilant in response.
@stacklokhq
thenewstack.io/evil-models-a…
Stacklok retweeted
While others are doing secret Santa, #GenAI builders are locally encrypting secrets w/ @StackLokHQ's new #opensource Code Gate
🎅🎁👇
This quoted post is unavailable.
Stacklok retweeted
.@StackLokHQ Donates Minder Security Project to @OpenSSF
#CyberSecurity #OpenSource
thenewstack.io/stacklok-dona…
Stacklok retweeted
.@StackLokHQ Donates Minder Security Project to @openssf | By @sjvn
#OpenSource @cmcluck
thenewstack.io/stacklok-dona…
Stacklok retweeted
🎉 Welcome to the OpenSSF family, Minder!
📣 @StackLokHQ is contributing Minder to OpenSSF as a sandbox project! Minder streamlines #OSSSecurity, auto-remediates issues, and flags key risks for devs & security teams.
🔍 Learn more about Minder: openssf.org/guest-blog/2024/…
Stacklok retweeted
⏰ Reminder that the CFP for SigstoreCon closes tomorrow, September 18!
events.linuxfoundation.org/s…
Stacklok retweeted
The CFP deadline for SigstoreCon has been extended to Wednesday, September 18, 2024 at 11:59 pm Mountain Daylight Time (UTC-6).
events.linuxfoundation.org/s…
Stacklok retweeted
Do you want to use the Trusty service from Stacklok in your Go app to check if an app dependency is save? Here's an enhanced version of the SDK that gives you the full report: github.com/autonomous-plane/…
A bonus for Go enthusiasts is the custom time string JSON decoding logic to handle python and Go times at the same time :-)
Stacklok retweeted
We're excited to have Craig McLuckie (@cmcluck), CEO for @stacklokhq, presenting on the keynote stage "Community-centric approaches to securing AI-generated code" at #AllThingsOpen! buff.ly/3ToSmk6
ALT Background is a starfield with clouds and a planet around the border with the Raleigh skyline under the speaker headshot in the foreground. Text reads: Craig McLuckie. CEO, Stacklok ATO 2024. All Things Open Conference. October 27-29 / Raleigh, NC USA
Stacklok retweeted
TSC Member @rdcallaw and community chair @haydentherapper from the Google OS Sec Team chatted with @puerco on the @StackLokHQ hosted 🌮 Securi-Taco Tuesdays 📺show. Lot's on sigstore and & software supply chain security. Catch it here: youtube.com/watch?v=JwfTCeBk…
Stacklok retweeted
The presentation that @left4deaf and Evan Anderson from @StackLokHQ delivered about “Implementing a multi-tenant relationship based authorization model with OpenFGA” in CloudNative SecurityCon is now live!
youtu.be/zIJOBLbaZOc?si=ecGJ…
#cncf #CNSCon
Stacklok retweeted
🚨 Developers, be cautious! New wave of malicious packages found in NuGet!
Hackers are using IL Weaving to inject malicious code into legitimate binaries, embedding remote access trojans in popular packages.
Read: thehackernews.com/2024/07/60…
#cybersecurity #infosec #technology
Stacklok retweeted
GitHub now has the functionality to generate provenance your GitHub Actions artifacts. Are you using GitHub's new artifact attestation functionality? github.blog/2024-05-02-intro…
Stacklok retweeted
And a reminder - you should pin your actions usage to a SHA. Want the security but don't want the bother? @StacklokHQ's Frizbee can take care of that for you! github.com/stacklok/frizbee-…
I just published a new version of github.com/test-summary/acti… which gives you great looking summaries of your GitHub Actions test run output.
Stacklok retweeted
We are now publishing VEX documents for the enterprise distribution of @fluxcd with the CVEs that do not affect the Flux controllers. github.com/controlplaneio-fl…
Thanks @openssf for making maintainer's life easier with OpenVEX and vexctl 🤗
Stacklok retweeted
🎙️ New episode: "What’s in the SOSS?" CRob chats with Adolfo García Veytia (@puerco) about the fascinating world of Software Bills of Materials (SBOMs) and VEX. Discussion on #SBOM standards, VEX's role in reducing false positives, and much more! 🚀
hubs.la/Q02Cd0040
Stacklok retweeted
If you’re at The Merge today and want to talk about open source, supply chain security, and repository management, find me in the OSS space by the GitHub booth! #diemerge
Stacklok retweeted
Ever come back to a Dockerfile after a few weeks and it no longer builds? The answer is to pin your image references to digests.
This video explains the problem and how to use the frizbee and digestabot tools to do this in an easy and maintainable way.
youtu.be/FfZZVZ-V5ho?si=jylx…
Stacklok retweeted
The #KuberTENes Birthday Bash is TODAY!
Join the @kubernetesio community for an evening of talks with the people who made #Kubernetes possible and get a peak into the next 10 years 🤗
Register for a free pass or tune in via livestream to #celebr8k8s: events.linuxfoundation.org/k…
