Search for a command to run...
Articles tagged with #security
Security reviews and the EU AI Act now ask a question most teams can't answer in one command: exactly which models, datasets, prompts and vector stores does this system depend on? Here is modelmuster - a deterministic, offline CLI that scans a project and emits a structured AI manifest of its whole AI supply chain. It never fails your build; it hands you the inventory.
A lapsed certificate is a preventable, self-inflicted outage — the expiry sits in a file nobody looks at until the pager fires. leafwatch parses your PEM/DER certs offline, sorts them by soonest expiry, flags the unhealthy ones, and gates CI. One Go binary, nothing leaves the machine.
A practical field guide to GitHub Actions vulnerabilities - script injection, privileged triggers, permissions/OIDC, supply chain - and how offline static analysis with actionward catches them before merge.
Reviewing prompt-building code tells you where injection can happen. It never tells you whether your model actually falls for it. hexprobe is a small red-team test runner that throws a curated OWASP-LLM01 battery at your running app and scores which payloads broke through - deterministically, offline, and in CI.
A container tag is a pointer, not a photograph. `nginx:latest` - and even `nginx:1.27.3` - can be repointed to different bytes tomorrow, by an ordinary re-push or by an attacker who hijacks the tag. That is how you get a non-reproducible build and a supply-chain foothold from one innocent-looking line. Here is why a `@sha256:` digest is the only reference that holds still, and digestlock, a static gate that fails the build when an image ships unpinned.
In a RAG or agent app the dangerous string is rarely the one your user typed - it is the web page, retrieved document, email, or tool result you fold into the prompt for them. Here is why indirect prompt injection is the quiet half of OWASP LLM01, what isolation looks like, and echofence, a static linter that flags the unsafe shape on the pull request.
