Skip to content

Instantly share code, notes, and snippets.

View joshuagl's full-sized avatar

Joshua Lock joshuagl

81 followers · 25 following
View GitHub Profile
@lukpueh
lukpueh / python-tuf_sec_audit_example.md
Last active March 8, 2023 10:00
Example python-tuf usage for security assessment

python-tuf security assessment

There are 2 classes of interesting TUF repository compromise scenarios and corresponding audit questions:

  1. Repository hosting compromised and/or MITM, signing keys safe --> "Can the attacker affect the client in any way?"

  2. Repository hosting compromised and/or MITM, signing keys compromised --> "Can the attacker affect the client beyond the capability of the compromised key in

@lukehinds
lukehinds / chains.md
Last active October 20, 2021 19:56

Deploy Chains

  • docker for using kind. Make sure you docker login first if you have not done so already.
  • kind will be used to set up a quick and lightweight Kubernetes cluster. Kubernetes vresion >= 1.15 is required. This was tested with v0.8.1.
  • kubectl is the Kubernetes client required to interact with a Kubernetes cluster. Make sure its version is also >= 1.15.
  • Additional Tekton CI/CD requirements to install:
    • Go - Make sure you have a recent version of the Go programming language installed and added to your PATH environment variable.
    • git make sure git is installed and set up to work with GitHub.
  • ko version >= v0.1 is required to work with and deploy development versions of Tekton.
@atoponce
atoponce / gist:07d8d4c833873be2f68c34f9afc5a78a
Last active June 26, 2024 09:36 — forked from tqbf/gist:be58d2d39690c3b366ad
Cryptographic Best Practices

Cryptographic Best Practices

Putting cryptographic primitives together is a lot like putting a jigsaw puzzle together, where all the pieces are cut exactly the same way, but there is only one correct solution. Thankfully, there are some projects out there that are working hard to make sure developers are getting it right.

The following advice comes from years of research from leading security researchers, developers, and cryptographers. This Gist was [forked from Thomas Ptacek's Gist][1] to be more readable. Additions have been added from

@bastman
bastman / docker-cleanup-resources.md
Created March 31, 2016 05:55
docker cleanup guide: containers, images, volumes, networks

Docker - How to cleanup (unused) resources

Once in a while, you may need to cleanup resources (containers, volumes, images, networks) ...

delete volumes

// see: https://github.com/chadoe/docker-cleanup-volumes

$ docker volume rm $(docker volume ls -qf dangling=true)

$ docker volume ls -qf dangling=true | xargs -r docker volume rm