news​

• AWS:
  • Karpenter 1.0 release
  • Amazon S3 adds additional context to HTTP 403 Access Denied error messages.
• Switzerland federal government requires releasing its software as open source.
• Folders for GitHub Action Workflows will not be supported this year.
• HashiCorp/IBM’s regulatory scrutiny could focus on cloud infrastructure management solutions.
• OpenTofu added to ThoughtWorks Technology Radar.

toolings​

• helm-charts-oci-proxy: transform Helm Chart into OCI images on the fly. Address any Helm Chart as OCI image.

news​

• Kubernetes 1.31 was released on August 13.
• PSA: Zero click RCE vulnerability on MS Windows, CVE Score 9.8, please patch now if you are using IPv6.
• Cyber insurers are winners from the biggest ever IT outage.
• The best hacks and security research from Black Hat and Def Con 2024.
• .internal is now officially a reserved TLD.
• Slack develops Bedrock Operator for Kubernetes StatefulSets.
• Proposal: terraform plan -light.
  • terraform plan -light.
  • tofu plan -light.
• Russ Cox steps down as tech lead of Go programming language.

news​

• Google's online search monopoly is illegal, US judge rules.
• Crowdstrike drivers are a prime target for RCE and LPE.'
• Coinbase awarded a $500k bug bounty via hackerone.
• Coming soon to K8s: mount a docker container as a volume.

toolings​

• aws-icons: SVG and PNG AWS icons for your architecture diagrams.
• logu: Extract patterns from (streaming) unstructured log messages.

news​

• GitHub:
  • GitHub Private Mirrors App – Public Beta.
  • Actions Usage Metrics is generally available (GitHub Enterprise Only) .
  • Validation on package name when submitting a new GitHub security advisory (GHSA).
  • Copilot Enterprise Mixed Licensing beta.
  • Repository updates July 31st 2024.
  • Copilot network requests are now routed based on subscription.
• Secure Boot useless on hundreds of PCs from major vendors after key leak.
• Homebrew Undergoes Security Audit .
• AWS Silently Deprecates Code Commit, Cloud9.
• OpenTofu 1.8.0 is out: with Early Evaluation, Provider Mocking, and a Coder-Friendly Future.
• OpenTofu plans dynamic providers/loops.
• The 7th annual Open Source Management & OSPO survey is now accepting responses!.

news​

• CrowdStrike
  • CrowdStrike outage explained: What caused it and what’s next.
  • Remediation and Guidance Hub.
  • Preliminary Post Incident Review (PIR).
• GitHub:
  • Code security configurations are supported in the audit log.
  • Security overview dashboards, secret scanning metrics and enablement trends reports are now generally available.
  • Deprecation of API endpoint to enable or disable a security feature for an organization.
  • Enable secret scanning for non-provider patterns on repositories with the REST API.
  • Enhance your pull request workflow: Copilot pull request text completion now in beta.
• the 2024 results from Stack Overflow’s Annual Developer Survey
• Wiz Rejects Google’s $23 Billion Offer, Seeks IPO Instead.