Sign in

William Woodruff (1.3.6.1.4.1.55738)

@yossarian.net
467 followers 66 following 184 posts

skeeting in accordance with the universal law. yossarian.net / blog.yossarian.net

PostsRepliesMedia
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 27/07/2026
“I take the green line to work”
000
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 15/09/2025
maslow’s hierarchy of needs? yeah, I think I’ve heard of that somewhere before
000
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 30/06/2025
zizmor v1.11.0 is out! this release comes with experimental LSP support and an accompanying vscode extension: marketplace.visualstudio.com/items?itemNa... full release notes here: docs.zizmor.sh/release-note...
032
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 07/04/2025
hope this helps
131
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 18/01/2025
zizmor v1.2.0 is released! this release brings a new audit (bot-conditions), which can detect spoofable `github.actor` checks. it also brings bugfixes/accuracy improvements across the board! many thanks to astral.sh for being our first logo sponsor! notes here: woodruffw.github.io/zizmor/relea...
060
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 10/01/2025
i'll be speaking at FOSDEM in the Security Devroom about zizmor and GitHub Actions security! details here: fosdem.org/2025/schedul... #fosdem #fosdem2025
Much of the world's open source lives on GitHub, and uses GitHub Actions to provide tasks ranging from routine testing to critical build and release processes. As such, the security of GitHub Actions (and the workflows and actions that users develop and consume) is paramount to the security of the world's software.

But how secure is GitHub Actions, really? This talk will introduce GitHub Actions' internal building blocks and (mostly implicit) security model, and provide real world examples of security failures and surprising avenues of exploitation that recur in widely used actions and workflows. These examples will be motivated via zizmor , a Rust-based static analysis tool for GitHub Actions that can catch many of the most common (and severe) footguns that occur when writing workflows.

Attendees will leave knowing more about GitHub Actions security and best practices for writing secure workflows, as well as how to use zizmor both locally and in Cl to detect potential security issues. No prior familiarity with GitHub Actions is necessary.
071
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 06/01/2025
071
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 26/12/2024
matched! sorry for the delay!
010
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 26/12/2024
matched, thank you!
000
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 26/12/2024
sorry, didn't realize! thank you too, matched!
010
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 08/12/2024
final update to this Ultralytics saga: blog.yossarian.net/2024/12/06/z...
142
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 06/12/2024
conclusions from today's live writeup of the ultralytics vulnerability: blog.yossarian.net/2024/12/06/z...
1148
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 17/11/2024
a bag of coffee labeled “DNS Reserve”
041
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 16/09/2024
papa darft eiren radler
010
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 09/04/2024
the rummage bin is back at 8PM ET! tonight's set is "classic jazz covers" set here: yossarian.net/junk/badradi... stream here: badradio.biz
010
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 09/03/2024
120
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 27/12/2023
stupid Mordor-ass building
080
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 03/12/2023
no thonx
a picture of a restaurant in Copenhagen called “The Bronx”
000
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 28/10/2023
Papa braucht seinen raddy
110
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 12/10/2023
such a beautiful language
a side of a car with “ich liebe dich” printed on it in cursive, which makes it look like “ich liebe dick”
000
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 09/10/2023
110
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 18/09/2023
papá necesita su raddy
100
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 22/08/2023
the world if immanuel kant had bang energy instead of coffee
020
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 19/08/2023
daddy needs his raddy
a blurry image of a bottle of Gösser NaturRadler
100
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 11/08/2023
120
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 08/08/2023
this would have given freud a seizure
010
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 08/08/2023
no need for a court; I’ll see you at
100
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 26/07/2023
old 2600 hits a little different now
041
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 21/07/2023
010
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 15/07/2023
030
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 08/07/2023
what’s the matter babe? you’ve barely touched your kosher/halal gay pride sonic boba tea
050
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 08/07/2023
020
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 08/07/2023
still in my amtrak hotdog era
140
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 01/07/2023
the two genders
taco shells and matzos next to each other in the “international foods” aisle
031
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 20/06/2023
i am infinitely indebted to @durbin.ee for this
030
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 16/05/2023
finally
020
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 02/05/2023
new debugging friend
020
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 27/04/2023
010
William Woodruff (1.3.6.1.4.1.55738) @yossarian.net · 25/04/2023
“I use nix to manage my desktop”
000