Ideas and Execution
-
Ideas and Execution
5 free ideas that Soatok doesn't have the time or energy to execute on.
-
Morten Linderudreplied to Soatok Dreamseeker last edited by
Hmm, I suspect threshold signatures with a TPM would be cool. Then you could have additional claims like the request coming from the correct machine as well as some identity claims.
I experimented a little bit with this through an SSH CA thing, single-user though.
https://linderud.dev/blog/ssh-ca-with-device-and-identity-attestation-ssh-tpm-ca-authority/
But replacing the SSH CA with an OIDC thing would be cool.
-
@soatok the cyclomatic complexity metrics as IoC sounds like a really straight-forward thing that should be part of all CD pipelines.
-
@faz @soatok @Nulhomme a starting point for the code stuff:
https://github.com/DataDog/supply-chain-firewall
https://github.com/some-natalie/bincapz-action
https://github.com/chainguard-dev/malcontent (bincapz was renamed)
