N3N

Find and protect your third-party GitHub actions from supply-chain attacks with Scharf.

Scharf is a blazing fast, scanner and lookup tool to find all GitHub workflow actions with mutable references.

#cybersecurity #github #devsecops #software

github.com/cybrota/scharf

Lenin alevski 🕵️💻

New Open-Source Tool Spotlight 🚨🚨🚨

GhidraMCP is an Model Context Protocol server for allowing LLMs to autonomously reverse engineer applications. It exposes numerous tools from core Ghidra functionality to MCP clients.

#ReverseEngineering #Ghidra

🔗 Project link on #GitHub 👉 lnkd.in/gRUrYpMx

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️

Apr 01, 2025, 19:08 · · · 0 · 0
Andrew Lock

Blogged: Creating SBOM attestations in GitHub Actions

andrewlock.net/creating-sbom-a

In this post I show how you can create attestations for SBOM documents that you have created for your application or Nuget package

#dotnet #security #github

Creating SBOM attestations in GitHub Actions

In this post I show how you can create attestations…

Andrew Lock | .NET Escapades
Rod2ik 🇪🇺 🇨🇵 🇪🇸 🇺🇦 🇨🇦 🇩🇰 🇬🇱

#ONLYOFFICE has a mix of #opensource and #proprietary components. Here’s how it breaks down:

1. #OpenSource Components:

The core of ONLYOFFICE, including #Document #Server, #Community #Server, and #Control #Panel, is #opensource.

The #source #code is available on #GitHub under the #Apache 2.0 #license.

Apr 01, 2025, 12:12 · · · 0 · 0
Habr

Как я решил выяснить, какие технологии сегодня популярны, а получился GitHub Trend Analyzer

Как определить, какие технологии действительно востребованы, а какие существуют лишь по инерции? Стандартные метрики популярности часто показывают противоречивые результаты. Пытаясь сравнить популярность нескольких технологий разработки ПО, я столкнулся с парадоксом: данные Google Trends и количество GitHub-репозиториев показывали высокую популярность технологий, которые в реальной разработке давно не используются. Разобравшись в причинах этого несоответствия, я создал инструмент для анализа GitHub-метрик, который позволяет отфильтровать "шум" и увидеть реальную картину технологических трендов. В статье я расскажу о методологии, неожиданных находках и о том, как этот инструмент может помочь вам принимать более обоснованные технические решения.

habr.com/ru/articles/895804/

#github #hindex #rpc #grpc #soap #api #jsonrpc #apache #google_trends

Как я решил выяснить, какие технологии сегодня популярны, а получился GitHub Trend Analyzer

На прошлой неделе я наткнулся на перевод главы из учебника…

Хабр
Arawa - Collab. Open Source

📢 Professionnels 💼 : découvrez les nouveautés à forte valeur ajoutée de #Nextcloud 31 Hub 10, sélectionnées par Arawa !
➡️ Article basé sur nos propres tests fonctionnels et sur nos recherches d'informations (sur #GitHub et auprès de Nextcloud)
➡️ Lisez nos astuces 💡, coups de cœurs ❤️, et avis 🤔
#️⃣ #LogicielsLibres #OpenSource #FreeSoftware #FOSS #TransfoNum #Cloud #SelfHosting
👋 @nextcloud
arawa.fr/2025/03/27/nouveautes

Principales nouveautés de Nextcloud Hub 10 (v. 31) - Arawa

Nextcloud Hub 10 v.31 a été dévoilé en février 2025.…

Arawa
iCode2

Do your eyes still get stung by profanity in text data?

Well, there is an R script that enables you to handle it. Really useful for working with social media data.

Check out the script on github:

github.com/Ifeanyi55/noProfani

#rstats #textdata #socialmediadata #github

Philipp Krenn

sneak peek: we'll have an #elastic developer event in mountain view in may — single track and just engineering. and I'll make sure to keep it *very* technical: besides developers from #LangChain and #github with more to come, we'll have shay (elasticsearch creator), costin (who most recently worked on JOINs for ES|QL), and dinesh (currently researching on agentic search) from elastic 1/2

Lenin alevski 🕵️💻

New Open-Source Tool Spotlight 🚨🚨🚨

TheHive is an open-source incident response platform designed to help teams investigate and manage cybersecurity incidents efficiently. It integrates with tools like MISP for threat intelligence sharing and supports automation through APIs. #CyberSecurity #IncidentResponse

🔗 Project link on #GitHub 👉 github.com/TheHive-Project/The

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️

GripNews

🌘 gcc -O2 -o vanity vanity.c -lssl -lcrypto
➤ 尋找特定 SHA-1 前綴的程式碼
gist.github.com/o0101/77eb378b
這是一個 GitHub Gist 頁面,展示了一個 C 語言程式碼 `vanity.c`,用於產生具有特定前綴的 SHA-1 哈希值。程式碼透過迭代修改原始文本中的特定單字(大小寫),計算哈希值,並與目標前綴進行比較,直到找到匹配的哈希值為止。目標前綴設定為 "20250327",程式碼會嘗試所有可能的組合,並將匹配的文本寫入一個新的檔案中。程式碼也包含程式執行的進度報告和錯誤處理機制。
+ 這個程式碼很有趣,可以看作是密碼破解的一種方式,雖然目標是 SHA-1,但概念可以應用到其他哈希演算法。
+ 這種方法雖然有效,但效率可能不高,尤其是在目標前綴比較複雜的情況下。不過,對於簡單的前綴,它可能是一個可行的解決方案。
#程式碼 #GitHub #SHA-1 #密碼破解

gcc -O2 -o vanity vanity.c -lssl -lcrypto

gcc -O2 -o vanity vanity.c -lssl -lcrypto. GitHub Gist:…

Gist
Robin Kipp

This is especially annoying because, while there are other community-developed actions that can do this, it appears this is the only one which was being actively maintained. Suppose I could fork one of the others and try updating it but man, what a headache... Also, the fact that an actively used GitHub Action can just be pulled like this with no prior warning at all is shocking to me. #GitHub should really know to do better than this IMO.

Robin Kipp

Um, I guess Windows apps on #GitHub that were using Minionguyjpro/Inno-Setup-Action to automatically build #InnoSetup installer packages are in trouble.
I was just using this yesterday, and all of a sudden it seems both the repo and user have been deleted. github.com/Minionguyjpro/Inno-

Kyle Davis

Do you use #GitHub search? Boy howdy, I know I do.

A friend of mine works for GitHub on their search experience and they seeking feedback.

If you’ve got a few minutes, fill out their survey:

airtable.com/appK4fhniAgzgSpqA

Airtable | Everyone's app platform

Airtable is a low-code platform for building collaborative…

Airtable
~/phranck :antifa:

Ich weiss, es gibt viele #GitHub und #GitLab Alternativen. Einige kenne ich auch schon. Aber, welche in Deutschland(!) oder auch AT gehosteten Git Alternativen wuerdet ihr empfehlen? Muss nicht unbedingt kostenlos sein, sollte halt nur da gehostet werden.

Gerne boosten/teilen.
:boost_ok: