Zach Steindler (@steiza) header
Zach Steindler (@steiza) profile picture

Zach Steindler

@steiza

Hacker, cooker, hiker

 Ann Arbor, MI
a2mi.social/web/@steiza
Joined December 2008
  • Tweets259
  • Following382
  • Followers501
21Media
Photo by Zach Steindler (@steiza)Photo by Zach Steindler (@steiza)Photo by Zach Steindler (@steiza)Photo by Zach Steindler (@steiza)Photo by Zach Steindler (@steiza)Photo by Zach Steindler (@steiza)Photo by Zach Steindler (@steiza)Photo by Zach Steindler (@steiza)Photo by Zach Steindler (@steiza)
Zach Steindler retweeted
Python Package Index (@pypi) profile picture
Python Package Index@pypi25 May 2023
An important update on our efforts to secure PyPI with multi-factor authentication: blog.pypi.org/posts/2023-05-…
Securing PyPI accounts via Two-Factor Authentication - The Python Package Index Blog

Securing PyPI accounts via Two-Factor Authentication - The Python Package Index Blog

PyPI will require all users who maintain projects or organizations to enable one or more forms of two-factor authentication (2FA) by the end of 2023.

blog.pypi.org
28
2
89
32,597
Zach Steindler retweeted
OpenSSF (@openssf) profile picture
OpenSSF@openssf17 May 2023
We Want to Hear from You 🔊👂➡️ Take the OpenSSF Software Security Awareness Survey openssf.org/blog/2023/05/17/…
Image from OpenSSF (@openssf)
8
4
1,359
Zach Steindler retweeted
OpenSSF (@openssf) profile picture
OpenSSF@openssf19 Apr 2023
Today we're proud to announce the release of version 1.0 of SLSA 🎉 Supply-chain Levels for Software Artifacts is an OpenSSF project that provides specifications for software supply chain security, established by community expert consensus. #OSSecurity
Image from OpenSSF (@openssf)
1
39
13
66
28,202
Zach Steindler retweeted
Clint Gibler (@clintgibler) profile picture
Clint Gibler
@clintgibler13 Mar 2023
🗒️ gh-sbom A gh CLI extension that outputs JSON SBOMs (in SPDX or CycloneDX format) for your GitHub repository github.com/advanced-security…
GitHub - advanced-security/gh-sbom: Generate SBOMs with gh CLI

GitHub - advanced-security/gh-sbom: Generate SBOMs with gh CLI

Generate SBOMs with gh CLI. Contribute to advanced-security/gh-sbom development by creating an account on GitHub.

github.com
6
16
1,304
Zach Steindler retweeted
Clint Gibler (@clintgibler) profile picture
Clint Gibler
@clintgibler1 Nov 2022
✍️ Sigstore project announces general availability and v1.0 releases Two of @projectsigstore foundational projects, Fulcio and Rekor, published v1.0 releases as well @steiza on why GitHub is excited github.blog/2022-10-25-why-w… By @davelester, @rdcallaw opensource.googleblog.com/20…
Why we're excited about the Sigstore general availability

Why we're excited about the Sigstore general availability

The Sigstore GA means you can protect your software supply chain today with GitHub Actions, and will power new npm security capabilities in the near future.

github.blog
3
4
Why is the @projectsigstore GA a big deal for developers? @steiza breaks it down for you. github.blog/2022-10-25-why-w…
Why we're excited about the Sigstore general availability

Why we're excited about the Sigstore general availability

The Sigstore GA means you can protect your software supply chain today with GitHub Actions, and will power new npm security capabilities in the near future.

github.blog
17
30
Really loving all the excitement about @npmjs and @projectsigstore today. Thanks @lilyhnewman for interviewing @lorenc_dan and I on it today! wired.com/story/github-code-…
3
23
Extremely excited about this. The npm team has been collaborating with GitHub's package security team for months putting together an RFC to improve the audibility and trust of npm packages using SigStore and trusted build infrastructure github.blog/2022-08-08-new-r…
3
49
4
178
Zach Steindler retweeted
GitHub (@github) profile picture
GitHub
@github1 Jun 2022
Want to use GitHub-hosted Actions runners, but need to access resources on your private network? You’re in luck! We’ve documented 3 ways to do it ⬇️. github.co/3NbDkJE
Connecting to a private network from GitHub-hosted Actions runners

Connecting to a private network from GitHub-hosted Actions runners

Several ways for GitHub-hosted Actions runners to connect to resources on your private network.

github.blog
15
1
63
Zach Steindler retweeted
GitHub (@github) profile picture
GitHub
@github6 Dec 2021
We've integrated @projectsigstore support for container image signing into the GitHub Actions starter workflow, so that developers can sign their container images by default. Check out the details! github.blog/2021-12-06-safeg…
Safeguard your containers with new container signing capability in GitHub Actions

Safeguard your containers with new container signing capability in GitHub Actions

GitHub has partnered with the OpenSSF and Project Sigstore to add container image signing to our default “Publish Docker Container” workflow, giving your users confidence that the container images...

github.blog
6
116
29
322
Zach Steindler retweeted
Scott Piper (@0xdabbad00) profile picture
Scott Piper
@0xdabbad003 Nov 2021
New parliament 1.5.0 release. Checks added for: - Single value condition too permissive (confusing IAM detail of ForAllValues), 🙏 patrobinson. See docs.aws.amazon.com/IAM/late… - Resource effectively *. 🙏 raghavkaul github.com/duo-labs/parliame…
1
1
17
Zach Steindler retweeted
Duo Labs (@duo_labs) profile picture
Duo Labs@duo_labs11 Feb 2021
Scoping IAM policies can limit privilege escalation in your AWS account, but building that scoped policy can be tricky. github.com/iann0036/iamlive uses AWS' Client Side Monitoring and github.com/duo-labs/parliame… to build a policy based on the actual API calls your app uses.
GitHub - iann0036/iamlive: Generate an IAM policy from AWS, Azure, or Google Cloud (GCP) calls...

GitHub - iann0036/iamlive: Generate an IAM policy from AWS, Azure, or Google Cloud (GCP) calls...

Generate an IAM policy from AWS, Azure, or Google Cloud (GCP) calls using client-side monitoring (CSM) or embedded proxy - iann0036/iamlive

github.com
Ian Mckay (@iann0036) profile pictureIan Mckay@iann00366 Feb 2021
Today I'm publishing "iamlive", a tool to generate basic #AWS #IAM policies using client-side monitoring of calls made from the AWS CLI or SDKs.🔒☁️ Try it out today and let me know if it's helpful! github.com/iann0036/iamlive
3
1
10
Zach Steindler retweeted
Scott Piper (@0xdabbad00) profile picture
Scott Piper
@0xdabbad0020 Feb 2018
It's out! Open-source tool for visualizing #awscloud environments developed at @duosec: duo.com/blog/introducing-clo… Demo: duo-labs.github.io/cloudmapp… #cloudsecurity
Duo Blog: Discover Security Insights and News | Cisco Duo

Duo Blog: Discover Security Insights and News | Cisco Duo

Explore the Duo Blog for expert tips, security insights, and resources to stay updated on the latest in security and access management trends.

duo.com
4
70
8
144
Zach Steindler retweeted
Duo Security (@duosec) profile picture
Duo Security@duosec22 Feb 2017
Brah, do you even game? Join us at Duo HQ in A2 this Fri for @NightlifeArcade, benefiting @_gamersociety. nightlifearcade.org
7
1
6
Zach Steindler retweeted
Brian Kelly (@resetbrian) profile picture
Brian Kelly@resetbrian14 Oct 2015
Just added our 5th startup to pitch at next Tuesday's #a2newtech Meetup, @makeros. See you there! meetu.ps/2KxGLv
4
1
Zach Steindler retweeted
Olark AI (@olark) profile picture
Olark AI@olark17 Feb 2015
Very excited to announce that Olark has crossed 10,000 paying subscribers! Read our story here: olark.com/10000 #Olark10K
2
7
12
Zach Steindler retweeted
Nutshell (@nutshell) profile picture
Nutshell@nutshell24 Apr 2014
Some of our pals at @olark stopped in to visit for #AllHandsSupport day! 🙌 👋 🙌 👋 🙌 👋 – at Ann Arbor, MI
Image from Nutshell (@nutshell)
3
5
3
Zach Steindler retweeted
Guy Suter (@guysuter) profile picture
Guy Suter
@guysuter7 Mar 2014
Sad I must send this letter to @nutshell customers re our @LinkedIn integration. Please support open APIs! nutshell.com/linkedout
1
4
1
Zach Steindler retweeted
PyCon US (@pycon) profile picture
PyCon US@pycon1 Oct 2012
Proud to announce a PyCon 2013 Sponsor Upgrade! Olark is now a Gold Level sponsor! bit.ly/NuP5EU @olark olark.com/
4
Zach Steindler retweeted
Ignite Ann Arbor (@ignitea2) profile picture
Ignite Ann Arbor@ignitea213 Jul 2012
Ignite Ann Arbor 7 will be Oct 25th! Now accepting Speaker Submissions!! igniteannarbor.com/?page_id=…
8
Load more