Skip to content

Security: andrew/nesbitt.io

Security

Report a vulnerability

security.md

layout page
title Security
permalink /security/
description Posts about software supply chain security, threat models, and the things that go wrong.

{%- assign sec_posts_all = site.posts | where_exp: "post", "post.tags contains 'security'" -%}

<script type="application/ld+json"> { "@context": "https://schema.org", "@type": "CollectionPage", "name": "{{ page.title }}", "description": "{{ page.description }}", "url": "{{ page.url | absolute_url }}", "isPartOf": { "@type": "Blog", "name": "{{ site.title }}", "url": "{{ site.url }}" }, "mainEntity": { "@type": "ItemList", "numberOfItems": {{ sec_posts_all.size }}, "itemListElement": [ {%- for post in sec_posts_all -%} { "@type": "ListItem", "position": {{ forloop.index }}, "url": "{{ post.url | absolute_url }}" }{%- unless forloop.last -%},{%- endunless -%} {%- endfor -%} ] } } </script>

Everything I've written about security, organized by type.

Reference Package managers Supply chain AI Tools Satire Everything else

{%- assign sec_posts = site.posts | where_exp: "post", "post.tags contains 'security'" -%}

Reference

{%- assign reference_posts = sec_posts | where_exp: "post", "post.tags contains 'reference'" | sort: "title" -%}

{%- for post in reference_posts -%}
{{ post.title | escape }} {%- if post.description -%} — {{ post.description }} {%- endif -%}
{%- endfor -%}

Package managers

{%- assign pm_posts = sec_posts | where_exp: "post", "post.tags contains 'package-managers'" | sort: "title" -%}

{%- for post in pm_posts -%} {%- unless post.tags contains 'supply-chain' -%}
{{ post.title | escape }} {%- if post.description -%} — {{ post.description }} {%- endif -%}
{%- endunless -%} {%- endfor -%}

Supply chain

{%- assign supplychain_posts = sec_posts | where_exp: "post", "post.tags contains 'supply-chain'" | sort: "title" -%}

{%- for post in supplychain_posts -%}
{{ post.title | escape }} {%- if post.description -%} — {{ post.description }} {%- endif -%}
{%- endfor -%}

AI

{%- assign ai_posts = sec_posts | where_exp: "post", "post.tags contains 'ai'" | sort: "title" -%}

{%- for post in ai_posts -%}
{{ post.title | escape }} {%- if post.description -%} — {{ post.description }} {%- endif -%}
{%- endfor -%}

Tools

{%- assign tools_posts = sec_posts | where_exp: "post", "post.tags contains 'tools'" | sort: "title" -%}

{%- for post in tools_posts -%}
{{ post.title | escape }} {%- if post.description -%} — {{ post.description }} {%- endif -%}
{%- endfor -%}

Satire

{%- assign satire_posts = sec_posts | where_exp: "post", "post.tags contains 'satire'" | sort: "title" -%}

{%- for post in satire_posts -%}
{{ post.title | escape }} {%- if post.description -%} — {{ post.description }} {%- endif -%}
{%- endfor -%}

Everything else

{%- assign categorized_posts = reference_posts | concat: pm_posts | concat: supplychain_posts | concat: ai_posts | concat: tools_posts | concat: satire_posts | map: "url" -%} {%- assign other_posts = sec_posts | sort: "title" -%}

{%- for post in other_posts -%} {%- unless categorized_posts contains post.url -%}
{{ post.title | escape }} {%- if post.description -%} — {{ post.description }} {%- endif -%}
{%- endunless -%} {%- endfor -%}

There aren't any published security advisories