#helix vs #neovim. spot the differences!

the main one isn't really visible, though: helix has a built-in #treesitter, and it does a great job at highlighting #rust out of the box, with zero configuration and dependencies!

this way, i don't have 20 plugins in #lua and/or #vimscript running in the background and autoupdating from #github - awesome! config is plain #toml - no need to write it in turing-complete languages which i only know poorly

shout out @bobulous https://www.bobulous.org.uk/coding/Helix-crib-sheet.html

Generate impressive-looking terminal output, look busy when stakeholders walk by

https://github.com/giacomo-b/rust-stakeholder

6 New Features in Git 2.49 !

6 Nuevas Características de Git 2.49 !

Zoom: https://nubecolectiva.com/comunidad/flyers-e-imagenes-de-programacion/

Semgrep | Popular GitHub Action tj-actions/changed-files is compromised

｢ Popular GitHub Action tj-actions/changed-files has been compromised (GitHub issue) with a payload that appears to attempt to dump secrets, impacting thousands of CI pipelines. This isn’t the first security issue with tj-actions/changed-files—see prior vulnerability CVE-2023-51664 ｣

https://semgrep.dev/blog/2025/popular-github-action-tj-actionschanged-files-is-compromised/

GitHub followers hit different

The tj-actions/changed-files #GitHub Action, which is currently used in over 23,000 repositories, has been compromised. In this attack, the attackers modified the action’s code and retroactively updated multiple version tags to reference the malicious commit. The compromised Action prints CI/CD secrets in GitHub Actions build logs. If the workflow logs are publicly accessible (such as in public repositories), anyone could potentially read these logs and obtain exposed secrets. There is no evidence that the leaked secrets were exfiltrated to any remote network destination.

https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised #Infosec

nice phishing attempt via #github issues, sent to a friend, who does (among others) professional phishing tests. gh is experiencing to much work to respond immediately.

Joined the Rust hype train with the first tool mate, Now more upcoming tool will be written in rust.

mate: Easily add your mate in git co-authors.

https://github.com/Mr-Sunglasses/mate

New Open-Source Tool Spotlight

DataDog's KubeHound is a tool that queries Kubernetes clusters and surfaces Pod Security Standard violations. It works by analyzing a cluster against best practices with minimal setup. Useful for teams focused on securing their workloads in Kubernetes environments. #Kubernetes #CyberSecurity

Project link on #GitHub https://github.com/DataDog/KubeHound

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

—
P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking

So heute alle meine privaten Projekte von #GitHub zu #Codeberg migriert und gleich noch das neueste dort angelegt. #OpenSource on #OpenPlatform:s

https://codeberg.org/prefec2

Ja einiges ist schon älter. Macht aber nichts.

Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos

Link: https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised
Discussion: https://news.ycombinator.com/item?id=43367987

are there any tools that check if a project is just actually a copy from another project?

RubyLLM: A delightful Ruby way to work with AI

https://github.com/crmne/ruby_llm

Popular GitHub Action tj-actions/changed-files is compromised

Link: https://semgrep.dev/blog/2025/popular-github-action-tj-actionschanged-files-is-compromised/
Discussion: https://news.ycombinator.com/item?id=43368870

Porting my old Repobot app to Elixir/Phoenix. The app automates keeping files in sync across repos with ability to generate them using templates.

READMEs, CHANGELOGs, CODE_OF_CONDUCT, LICENSE...but also workflow configurations etc.

You get the idea

#buildinpublic #github #automation

And I just made another #GitHub issue on #ToaruOS, this time requesting if I can merge my #RPi3 code changes.

https://github.com/klange/toaruos/issues/316

️ Microsoft Encourages Visual Studio Developers to Share Copilot AI Prompts

#devdigest #dotnet #net #microsoft #ide #visualstudio #git #github

https://devdigest.today/goto/3639

Highlights from Git 2.49

#git #github

https://github.blog/open-source/git/highlights-from-git-2-49/

️ GitHub Releases Samples for Integrating SQL Server with .NET Aspire

#devdigest #azure #cloud #git #github #sqlserver #sql #net

https://devdigest.today/goto/3637

ArkFlow – High-performance Rust stream processing engine

https://github.com/chenquan/arkflow