OWASP BLT Moves Dozens of Repositories After GitHub Organization Goes Offline

·2 views

Over 50 repositories under the OWASP BLT GitHub organization became inaccessible during Google Summer of Code, coinciding with a GitHub outage. The project applied an organization-wide ruleset for security consistency, but the team could not determine whether it or the outage caused the disruption. Repeated support requests to GitHub produced no clear explanation over several months. To keep contributors working, the team moved its code to GitLab, and later adopted ForkMesh, a self-hosted Git forge built by a community member, as its official source of truth.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Why the First Two Weeks of an AI Deployment Decide Its Outcome

An engineer embedded with a customer during the opening stretch of a deployment works to replace assumptions with facts before building anything. The brief written in a meeting room often describes a proxy rather than the real problem, which becomes clear only after observing daily operations. The article outlines five principles: focus on the actual problem rather than a stated tool, request data and system access immediately, examine raw unfiltered data before designing, select a small but meaningful first workflow, and identify every stakeholder who could block the work. Skipping this phase, it argues, results in building the wrong solution efficiently. Early discovery turns potential delays into useful signals about how the deployment will run.

0 comments Read more at DEV Community

ProgrammingHacker News ·

Microagi Launches Project Aimed at Accelerating Embodied AGI Development

Microagi has published a website describing its work on accelerating embodied artificial general intelligence. The item surfaced on Hacker News, where it gathered a few points and no discussion comments at the time of posting. The source material provides only the project name, a link to the company's site, and basic community engagement metrics. Specific technical details, timelines, funding, or research results are not included in the available text.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

Claude Code Can Now Run on Local or Cloud Models via Ollama on Windows

A developer has published a guide showing how to run the Claude Code terminal coding agent with models served by Ollama instead of Anthropic's accounts. The setup requires Node.js for installing Claude Code, the Ollama app on Windows, and a local model chosen from Ollama's list, such as the small qwen3.5:0.8b used in the example. Local models keep prompts and code on the user's machine but depend heavily on hardware and model size. For more capable models, Ollama's cloud options can be used after signing in, though these send prompts to Ollama's servers and have usage caps.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Live Supabase service_role keys found committed in public MCP config files on GitHub

A security researcher scanned public GitHub repositories for MCP configuration files that contain database credentials. After decoding and verifying candidate matches, 12 files were found to hold real service_role keys, which bypass row-level security and grant full database access. Four of the associated Supabase projects were still live at the time of the scan, one of them pushed the same day. The author argues that developers treat .mcp.json files like editor settings rather than secret stores, and that the ecosystem lacks the secret-scanning safeguards that .env files have. The researcher recommends rotating exposed keys and moving them into runtime environment variables, and has released free local auditing tools for these configs.

0 comments Read more at DEV Community