Weekly news | 2024-07-31

news

• GitHub:
  • GitHub Private Mirrors App – Public Beta.
  • Actions Usage Metrics is generally available (GitHub Enterprise Only) .
  • Validation on package name when submitting a new GitHub security advisory (GHSA).
  • Copilot Enterprise Mixed Licensing beta.
  • Repository updates July 31st 2024.
  • Copilot network requests are now routed based on subscription.
• Secure Boot useless on hundreds of PCs from major vendors after key leak.
• Homebrew Undergoes Security Audit .
• AWS Silently Deprecates Code Commit, Cloud9.
• OpenTofu 1.8.0 is out: with Early Evaluation, Provider Mocking, and a Coder-Friendly Future.
• OpenTofu plans dynamic providers/loops.
• The 7th annual Open Source Management & OSPO survey is now accepting responses!.

toolings

• Docker-OSX: Run macOS VM in a Docker with X11 forwarding.
• AutoMQ: a cloud-first alternative to Kafka by decoupling durability to S3 and EBS.
• aws_breaking_changes: List of changes announced for AWS that may break existing code.
• giscus: A comment system powered by GitHub Discussions.

blogs

• Anyone can Access Deleted and Private Repository Data on GitHub.
• Was the Internet designed to survive a nuclear attack ?
• Lessons from CrowdStrike’s buggy update: the critical importance of robust release processes.
• Kubernetes Migration – Moving on to Day 0.
• Enhancing Bitnami Helm Charts Security: A Kubescape Case Study.
• Recorded webibars:
  • Top 10 lessons learned from managing Kubernetes.
  • Kubernetes policies master class.
  • Continuous Compliance in Kubernetes Environments with KubeArmor.