Before You Hit Publish: The Security Checklist for Taking Your GitHub Repository Public
I maintain a handful of public demo repos myself — passkey-demo, ratelimit, ytd, tmux — and every single one of them we…
#DevSecOps
3 posts
I Scanned My AI Agent Skills and Found 140 Vulnerabilities
You install a skill for your AI coding agent. It does what it says. You move on. But what else did it do? What did it r…
Docker Privilege Escalation: Understanding Container Security Boundaries
Introduction In the rapidly evolving landscape of containerized applications, Docker has become the de facto standard f…