Web Review, Week 2026-15 - ervin
Website Description
Open source security at Astral
astral.shInsights and guidance from our engineering team on how Astral secures its tools.
GitHub - danielraffel/pulp: Cross-platform audio plugin and application framework. MIT licensed.
Cross-platform audio plugin and application framework. MIT licensed. - danielraffel/pulp
Astral told you how they secure uv. Here's what to keep.
Astral published a detailed writeup of how they secure their org. Most of it is team-scale GitHub policy. Four things translate directly to a solo Python maintainer.
Hardening GitHub Actions: Lessons from Recent Attacks | Wiz Blog
Build resilient GitHub Actions workflows with insights from real attacks, missteps to avoid, and security tips GitHub’s docs don’t fully cover.
A deep dive into the wild world of GitHub Actions' tagging formats · Jamie Tanna | Software Engineer
Inside the ways that GitHub Actions' versioning works, and how we improved Renovate's support.