Inspecting the Source of Go Modules
Explains the security of Go's Checksum Database and the risks of viewing unverified source code on platforms like GitHub, with tools to verify module integrity.
Explains the security of Go's Checksum Database and the risks of viewing unverified source code on platforms like GitHub, with tools to verify module integrity.
A guide explaining why and how to sign Git commits with GPG on GitHub to prevent impersonation and ensure code authenticity.
Explores the risks and consequences of accidentally leaking secrets like API keys in code repositories, and how to prevent and respond to such leaks.
Explains why storing secrets like passwords and API keys in Git is a security risk and discusses better alternatives for secret management.