William Woodruff (1.3.6.1.4.1.55738)
LightNews LightNews
banner
yossarian.net
William Woodruff (1.3.6.1.4.1.55738)
@yossarian.net
360 followers 65 following 160 posts
skeeting in accordance with the universal law.

yossarian.net / blog.yossarian.net
Posts Replies Media Videos
yossarian.net
maslow’s hierarchy of needs? yeah, I think I’ve heard of that somewhere before
September 15, 2025 at 8:04 PM
yossarian.net
zizmor v1.11.0 is out! this release comes with experimental LSP support and an accompanying vscode extension:

marketplace.visualstudio.com/items?itemNa...

full release notes here: docs.zizmor.sh/release-note...
June 30, 2025 at 7:33 PM
yossarian.net
hope this helps
April 7, 2025 at 8:06 PM
yossarian.net
zizmor v1.2.0 is released!

this release brings a new audit (bot-conditions), which can detect spoofable `github.actor` checks. it also brings bugfixes/accuracy improvements across the board!

many thanks to astral.sh for being our first logo sponsor!

notes here: woodruffw.github.io/zizmor/relea...
January 18, 2025 at 6:03 PM
yossarian.net
i'll be speaking at FOSDEM in the Security Devroom about zizmor and GitHub Actions security!

details here:

fosdem.org/2025/schedul...

#fosdem #fosdem2025
Much of the world's open source lives on GitHub, and uses GitHub Actions to provide tasks ranging from routine testing to critical build and release processes. As such, the security of GitHub Actions (and the workflows and actions that users develop and consume) is paramount to the security of the world's software. But how secure is GitHub Actions, really? This talk will introduce GitHub Actions' internal building blocks and (mostly implicit) security model, and provide real world examples of security failures and surprising avenues of exploitation that recur in widely used actions and workflows. These examples will be motivated via zizmor , a Rust-based static analysis tool for GitHub Actions that can catch many of the most common (and severe) footguns that occur when writing workflows. Attendees will leave knowing more about GitHub Actions security and best practices for writing secure workflows, as well as how to use zizmor both locally and in Cl to detect potential security issues. No prior familiarity with GitHub Actions is necessary.
January 10, 2025 at 1:48 AM
yossarian.net
January 6, 2025 at 11:59 PM
yossarian.net
matched! sorry for the delay!
December 26, 2024 at 10:41 PM
yossarian.net
matched, thank you!
December 26, 2024 at 7:38 PM
yossarian.net
sorry, didn't realize! thank you too, matched!
December 26, 2024 at 7:03 PM
yossarian.net
final update to this Ultralytics saga:

blog.yossarian.net/2024/12/06/z...
December 8, 2024 at 3:04 AM
yossarian.net
conclusions from today's live writeup of the ultralytics vulnerability:

blog.yossarian.net/2024/12/06/z...
December 6, 2024 at 9:37 PM
yossarian.net
a bag of coffee labeled “DNS Reserve”
November 17, 2024 at 7:42 PM
yossarian.net
papa darft eiren radler
September 16, 2024 at 5:45 PM
yossarian.net
the rummage bin is back at 8PM ET!

tonight's set is "classic jazz covers"

set here: yossarian.net/junk/badradi...
stream here: badradio.biz
April 8, 2024 at 11:07 PM
yossarian.net
March 9, 2024 at 2:49 AM
yossarian.net
stupid Mordor-ass building
December 27, 2023 at 4:38 PM
yossarian.net
no thonx
a picture of a restaurant in Copenhagen called “The Bronx”
December 3, 2023 at 9:15 AM
yossarian.net
Papa braucht seinen raddy
October 28, 2023 at 9:27 PM
yossarian.net
such a beautiful language
a side of a car with “ich liebe dich” printed on it in cursive, which makes it look like “ich liebe dick”
October 12, 2023 at 3:08 PM
yossarian.net
October 9, 2023 at 9:45 PM
yossarian.net
papá necesita su raddy
September 18, 2023 at 8:42 PM
yossarian.net
the world if immanuel kant had bang energy instead of coffee
August 22, 2023 at 8:05 PM
yossarian.net
daddy needs his raddy
a blurry image of a bottle of Gösser NaturRadler
August 19, 2023 at 7:52 PM
yossarian.net
August 11, 2023 at 7:09 PM
yossarian.net
this would have given freud a seizure
August 7, 2023 at 11:48 PM