Tag: maintainers

  • Hacker News: OpenAUTH: Universal, standards-based auth provider

    Source URL: https://openauth.js.org/ Source: Hacker News Title: OpenAUTH: Universal, standards-based auth provider Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses OpenAuth, an open-source centralized authentication server designed for easy self-hosting on user infrastructure. Unlike conventional library solutions, OpenAuth is compliant with OAuth 2.0, allowing for integration across various applications. It provides…

  • Cloud Blog: The 10 top Kubernetes Podcast episodes of 2024

    Source URL: https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-podcast-top-episodes-of-2024/ Source: Cloud Blog Title: The 10 top Kubernetes Podcast episodes of 2024 Feedly Summary: Here at the Kubernetes Podcast, we’ve been bringing you news and interviews from the Kubernetes and Cloud-Native technology space since 2019. And this year, Kubernetes turned 10 years old. We celebrated the milestone by focusing on open-source maintainers,…

  • Slashdot: Open Source Maintainers Are Drowning in Junk Bug Reports Written By AI

    Source URL: https://developers.slashdot.org/story/24/12/10/2334221/open-source-maintainers-are-drowning-in-junk-bug-reports-written-by-ai?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Open Source Maintainers Are Drowning in Junk Bug Reports Written By AI Feedly Summary: AI Summary and Description: Yes **Summary:** The report highlights the rising prevalence of low-quality security vulnerability submissions generated by AI models in open-source projects, which poses significant challenges for developers. Seth Larson from the Python…

  • The Register: Open source maintainers are drowning in junk bug reports written by AI

    Source URL: https://www.theregister.com/2024/12/10/ai_slop_bug_reports/ Source: The Register Title: Open source maintainers are drowning in junk bug reports written by AI Feedly Summary: Python security developer-in-residence decries use of bots that ‘cannot understand code’ Software vulnerability submissions generated by AI models have ushered in a “new era of slop security reports for open source" – and the…

  • Slashdot: GitHub Announces New Open Source Fund with Security Mentoring

    Source URL: https://news.slashdot.org/story/24/11/24/0414244/github-announces-new-open-source-fund-with-security-mentoring?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: GitHub Announces New Open Source Fund with Security Mentoring Feedly Summary: AI Summary and Description: Yes Summary: The GitHub Secure Open Source Fund has been launched with a commitment of $1.25 million to support open-source projects. This initiative aims to provide funding and mentorship to maintainers of critical software,…

  • Cloud Blog: Google Cloud NetApp Volumes now available for OpenShift on Google Cloud

    Source URL: https://cloud.google.com/blog/topics/partners/netapp-volumes-now-available-for-openshift-on-google-cloud/ Source: Cloud Blog Title: Google Cloud NetApp Volumes now available for OpenShift on Google Cloud Feedly Summary: As a result of new joint efforts across NetApp, Red Hat and Google Cloud, we are announcing support for Google Cloud NetApp Volumes in OpenShift on Google Cloud through NetApp Trident Version 24.10. This enables…

  • Hacker News: Attestations: A new generation of signatures on PyPI

    Source URL: https://blog.trailofbits.com/2024/11/14/attestations-a-new-generation-of-signatures-on-pypi/ Source: Hacker News Title: Attestations: A new generation of signatures on PyPI Feedly Summary: Comments AI Summary and Description: Yes Summary: The announcement discusses a new security feature on the Python Package Index (PyPI): index-hosted digital attestations based on PEP 740. This feature enhances package provenance and security by integrating with Trusted…

  • Simon Willison’s Weblog: PyPI now supports digital attestations

    Source URL: https://simonwillison.net/2024/Nov/14/pypi-digital-attestations/#atom-everything Source: Simon Willison’s Weblog Title: PyPI now supports digital attestations Feedly Summary: PyPI now supports digital attestations Dustin Ingram: PyPI package maintainers can now publish signed digital attestations when publishing, in order to further increase trust in the supply-chain security of their projects. Additionally, a new API is available for consumers and…

  • Hacker News: PyPI now supports digital attestations

    Source URL: https://blog.pypi.org/posts/2024-11-14-pypi-now-supports-digital-attestations/ Source: Hacker News Title: PyPI now supports digital attestations Feedly Summary: Comments AI Summary and Description: Yes Summary: PyPI has introduced support for digital attestations, enhancing supply-chain security for Python package maintainers. This update, part of PEP 740, allows maintainers to publish signed attestations associated with their projects, ensuring higher trust and…