Arkadii Yakovets · CCSP · CISSP · CSSLP

🎉 OWASP Nest Achieves OpenSSF Best Practices Passing Badge!

We're thrilled to announce that OWASP Nest has officially earned the OpenSSF Best Practices Passing Badge!

www.bestpractices.dev/en/projects/...

🎉 Big news from the OWASP Nest Team! 🎉

We're thrilled to share that OWASP Nest has officially been promoted from the Incubator level to the Lab level!

www.linkedin.com/feed/update/...

🎉We're proud to announce that 3 proposals from OWASP Nest have been accepted for GSoC 2025 🎉

- OWASP Contribution Hub Development by Raj Gupta
- OWASP Nest API and Schema Development by Abhay Mishra
- OWASP NestBot as an AI Agent/Assistant by Dishant Miyani

#GSoC #OpenSource #OWASP #OWASPNest

🚀 GSoC 2025 is just around the corner! 🚀

GSoC 2025 contributor application period opens March 24 and we’re looking for passionate developers to help shape the future of OWASP Nest! Check out our project ideas and consider applying: owasp.org/www-communit...

#GSoC #OWASP #OpenSource

OWASP Juice Shop leadership changes & contributor recognition | OWASP Foundation OWASP Juice Shop leadership changes & contributor recognition on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.

We are proudly announcing that @jannik@infosec.exchange is as of today officially co-leading the @owasp.org Juice Shop project together with @bkimminich.bsky.social! 🧃🥳

👉 Read more about this in our blog post https://owasp.org/blog/2025/01/29/juice-shop-leadership.html

I'm wondering if you have any insights on #Vanta vs #Drata (or any other competitor) pros and cons. And yes, you're the price is pretty steep. #soc2 #iso27001

Supply-chain attack analysis: Ultralytics - The Python Package Index Blog Analysis of a package targeted by a supply-chain attack to the build and release process

Last week the Python package "Ultralytics" suffered a supply-chain attack on its build and release process. This is a review of the attack from @pypi.org's perspective.

There's plenty of advice for how Python projects can increase their #security posture:

blog.pypi.org/posts/2024-1...

GitHub - vacanza/holidays: Open World Holidays Framework Open World Holidays Framework. Contribute to vacanza/holidays development by creating an account on GitHub.

A log full of interesting things, with the Open World Holidays Framework ( #python #holidays ) standing out the most. It's fascinating to see the wide variety of holidays around the world, shaped by rich cultural differences and diverse calendars.

Is it just me, or is the entire world waiting for the #npm scheduled infrastructure upgrade to be completed?

GitHub - DataDog/supply-chain-firewall: A tool for preventing the installation of malicious PyPI and npm packages :fire: A tool for preventing the installation of malicious PyPI and npm packages :fire: - DataDog/supply-chain-firewall

#supply-chain #firewall #open-source

github.com/DataDog/supp...

Introducing Supply-Chain Firewall: Protecting Developers from Malicious Open Source Packages | Datadog Security Labs Release of Supply-Chain Firewall, an open source tool for preventing the installation of malicious PyPI and npm packages

@securitylabs.datadoghq.com has just released a supply-chain firewall v1.0.2

securitylabs.datadoghq.com/articles/int...

Weak Pointers in Go: Why They Matter Now Through the weak package, you can create these special pointers that automatically become nil when their target memory gets collected. While they’re a bit trickier to use than regular pointers, they’r...

When we discussed string interning earlier, we mentioned a concept #Go uses to implement its unique map feature: the “weak pointer”. Discover more about GoLang in the last Phuong Le post ➡️
victoriametrics.com/blog/go-weak...

#golang #go #programming #TechInsights

60% OFF #CKA + #CKAD+ #CKS Certification Bundle -- $438 with CYBER24BUNDLE code (offer ends December 11, 2024)

60% OFF #CKA + #CKAD + #CKS Bundle -- $438 with CYBER24BUNDLE code (expires Dec 11, 2024, 12-months to schedule & take the exam, 2 exam attempts).
training.linuxfoundation.org/training/cka... -- Certified Kubernetes Security Specialist (CKS) requires passed Certified Kubernetes Administrator (CKA).

Basil sprouts so easily in my experience too! Today I planted one Genovese basil and one lemon basil, but I’m mostly focusing on cilantro, parsley, dill, and trying out some plants that are completely new to me.

🌱 My ultimate goal is to bring my #hydroponics #garden back to a setup similar to this (it all started from #cilantro for tacos)!

I’m especially hopeful that the #onions and #celery will thrive this time around. And I’ve got big hopes for the 🥦 -- it’s my first time growing it! 🌱

Getting closer!

I needed a sturdy base for my setup, so that meant a couple of trips to Home Depot!

Before

After

🌱 Speaking of my #hydroponics #garden, I dug up some photos from a couple of years ago of my very first indoor setup! I repurposed my laundry room, building the system right on top of the washer and dryer. It was a humble start, but such a rewarding journey to see it come to life! 🌱

Hoping for better results this round. Fingers crossed everything thrives!

I just started planting #seeds for my #hydroponics garden! This time, I’m growing cilantro, parsley, #basil, dill, onions, salad bowl lettuce, broccoli, and celery. I decided to skip #sorrel for now. It’s my first time trying #broccoli, and I’m giving #lettuce, onions, and celery another shot.

I think it’s time to revive 🌱 my #indoor #hydroponics #garden! Last month, I had to step back when the parsley and #basil fell ill, but the sorrel thrived, producing an incredible harvest of lush leaves. Sadly, #KubeCon'24 timing wasn’t kind to these green friends too 🌿 #gardening #plants

5. Use Cases:

MkDocs excels for #lightweight, visually appealing project documentation.

Sphinx is better for #comprehensive, structured documentation with automatic API generation.

4. Community and Plugins:

MkDocs has a smaller but growing ecosystem, with plugins like #mkdocstrings for API documentation.

Sphinx has a mature community with a vast number of extensions, such as napoleon for docstring styles and autodoc for API docs.

3. Best Features:

MkDocs offers clean, modern themes (like Material) and straightforward setup.

Sphinx provides advanced cross-referencing, glossary support, and automatic #API documentation using #autodoc

2. Supported Formats:

MkDocs supports Markdown natively and has limited reStructuredText support through plugins.

Sphinx natively supports #reStructuredText and can handle Markdown via extensions like #MyST.

1. Ease of Use:
MkDocs is simple to set up, using Markdown for content and a mkdocs.yml configuration file.

Sphinx is more complex, requiring familiarity with reStructuredText (or Markdown via extensions) and configuring a Python-based `conf.py` file.

GitHub - vacanza/holidays: Open World Holidays Framework Open World Holidays Framework. Contribute to vacanza/holidays development by creating an account on GitHub.

I'm going to migrate Open World Holidays Framework (github.com/vacanza/holi...) documentation from #sphinx + #rst to #MkDocs + #Markdown. Any suggestions?

Here is my pro vs con list:

How to verify your Bluesky account - Bluesky Here's how to verify your Bluesky account by setting your website as your username.

How to set a website as your Bluesky username

bsky.social/about/blog/4...

You need to be located in one of the GitHub Sponsors eligible regions though -- docs.github.com/en/sponsors/...