Weekly news | 2023-07-19

announcements

• Save Open Source: The impending tragedy of the EU Cyber Resilience Act
• RCE in OpenSSH's forwarded ssh-agent
• Google Cloud Build bug lets hackers launch supply chain attack
• Microsoft lost its keys, and the government got hacked
• GitHub Actions – OIDC integration with AWS no longer requires pinning of intermediate TLS certificates
• GitHub goes passwordless, announces passkeys beta preview

• ECS on Fargate just got 30% to 75% faster
• AWS CodeBuild now supports GitHub Actions and limitations

toolings

• Terraform graph beautifier
• SteamPipe
• Statusgator
• EndOfLife.Date

others

• Managing Terraform Modules in a Monorepo