#+HashtagPLUS#Hashtag the Web... #Tag your World!
Join

Menu

New post

#Repos

31 posts

Feed·
20 of 31 posts
Gheist: 13,500 secret-dumping workflows planted with stolen GitHub tokens — audit yours in 5 minutes
📰
0Read More

Gheist: 13,500 secret-dumping workflows planted with stolen GitHub tokens — audit yours in 5 minutes

DEV Community: infosec·Sam LABBE·4 days ago
#5sP9xfG0
#devtoinfosec#devto#dev#github#sync

Since September, a campaign called Gheist planted 13,500 secret-dumping workflows with stolen GitHub tokens — base32 defeats log masking, permissions:{} protects nothing, and the exfil channel is GitHub itself.…

15s
Wiz counted 13,500 Gheist branches today. I rebuilt its masking bypass in 15 lines and scanned my own repos.
🖼️
0Read More

Wiz counted 13,500 Gheist branches today. I rebuilt its masking bypass in 15 lines and scanned my own repos.

DEV Community: github·frank chu·4 days ago
#wQlFqKiI
#devtogithub#technology#devto#dev#secrets

The Gheist campaign plants a sync-check workflow with stolen GitHub tokens and prints repo secrets base32-encoded, defeating verbatim log masking.…

15s
I built a site that estimates what your repos could be worth to AI companies
🖼️
0Read More

I built a site that estimates what your repos could be worth to AI companies

DEV Community: github·Pietro·8 days ago
#vOlZIv7z
#devtogithub#technology#devto#dev#history

I keep an eye on companies that train AI models. I spent the past year or so creating the best AI...

15s
The Anatomy of 50 Open Source PRs: What Gets Merged, What Gets Ignored, and Why (Real Data From an AI Agent)
🖼️
0Read More

The Anatomy of 50 Open Source PRs: What Gets Merged, What Gets Ignored, and Why (Real Data From an AI Agent)

DEV Community: github·zk0x /// ℹ️·5 months ago
#BmKnUl5T
#dev#merge#first#maintainer#hours

I let an AI agent submit 50+ pull requests across open source projects in 72 hours. Here's the...

15s
10 nerdy GitHub repos I keep learning from
🖼️
0Read More

10 nerdy GitHub repos I keep learning from

DEV Community: github·Paul Horn·5 months ago
#VIpqqdUg
#dev#repo#repos#good#interesting

I spend a lot of time browsing GitHub, not only to find tools, but to understand how good software is...

15s
The GitHub Prospecting Playbook: How PLG Teams Turn Open-Source Stars Into a Qualified Pipeline
🖼️
0Read More

The GitHub Prospecting Playbook: How PLG Teams Turn Open-Source Stars Into a Qualified Pipeline

DEV Community·Zackrag·6 months ago
#0SQzEC5r
#github#sales#productivity#webdev#enrichment

How to turn GitHub stargazers, forks, and contributors into an enriched B2B pipeline — with real workflows, rate limit tips, and tool comparisons.

15s
Gitleaks: Open-Source Secret Scanning for Git Repos in 2026
🖼️
0Read More

Gitleaks: Open-Source Secret Scanning for Git Repos in 2026

DEV Community·pickuma·6 months ago
#dFKKSY0S
#webdev#devops#cloud#astro#gitleaks

A hands-on review of Gitleaks for catching hardcoded secrets in Git history. Covers the CLI, pre-commit hooks, CI integration, and how it stacks up against GitGuardian for teams that don't want to pay per developer.

15s
I scanned 30 Supabase repos this morning and found 3 production-grade leaks (one with service_role committed)
🖼️
0Read More

I scanned 30 Supabase repos this morning and found 3 production-grade leaks (one with service_role committed)

DEV Community·Perufitlife·6 months ago
#8Ghwspk2
#supabase#security#repos#anon#article

From Dev.to - webdev: I scanned 30 Supabase repos this morning and found 3 production-grade leaks (one with service_role committed)

15s
Why Half of This Week's Trending GitHub AI Tools Are Called "Skills"
🖼️
0Read More

Why Half of This Week's Trending GitHub AI Tools Are Called "Skills"

DEV Community·Visesh·6 months ago
#FCCn6004
#ai#opensource#github#skills#repos

Four of this week's 20 trending open-source GitHub projects share one word. That pattern reveals more about AI tooling than any single repo.

15s
I scanned 10 mobile codebases for health issues — here's what I found
🖼️
0Read More

I scanned 10 mobile codebases for health issues — here's what I found

DEV Community·mavoryl·6 months ago
#afJq05dL
#mobile#android#repo#repos#files

Every mobile repo I worked on had similar problems: very large PNG images, unused asset files that...

15s
Claude Code vs Cursor for solo indie dev: an honest breakdown (I shipped 4 iOS apps to find out)
🖼️
0Read More

Claude Code vs Cursor for solo indie dev: an honest breakdown (I shipped 4 iOS apps to find out)

DEV Community·孫昊·6 months ago
#WT1Ohzix
#round#ai#claude#code#cursor

From Dev.to - ios: Claude Code vs Cursor for solo indie dev: an honest breakdown (I shipped 4 iOS apps to find out)

15s