Software Engineer (Platform Engineer) OSS Developer #Golang @aquaclivm English: @szkdash_en
Joined April 2018
- Tweets3K
- Following66
- Followers1.2K
- Likes4.2K
Pinned Tweet
aqua の本を書きました。無料です。aqua 初心者の方は勿論、既に aqua を使っている人にも参考になる内容です
aqua CLI Version Manager 入門｜Shunsuke Suzuki zenn.dev/shunsuke_suzuki/boo… #zenn
書きました。公式サポートは良い話ですが、 ghtkn にはセキュリティ的に様々な優位性があります。
GitHub CLI が短命 token をサポートしても ghtkn が必要な理由｜Shunsuke Suzuki zenn.dev/shunsuke_suzuki/art… #zenn
I wrote a blog post about GitHub CLI's new expiring tokens and the security risks they still pose.
GitHub CLI's New Expiring Tokens Still Leave Your Refresh Token Exposed to Malware
suzuki-shunsuke.hashnode.dev…
ghtkn の access token の自動更新機能について書きました。
3 ヶ月ほど下書きのまま放置してました 😅
GitHub CLI の短命トークンとの比較は別記事に書いてます。
zenn.dev/shunsuke_suzuki/art… #zenn
書きました。公式サポートは良い話ですが、 ghtkn にはセキュリティ的に様々な優位性があります。
GitHub CLI が短命 token をサポートしても ghtkn が必要な理由｜Shunsuke Suzuki zenn.dev/shunsuke_suzuki/art… #zenn
I wrote a blog post about GitHub CLI's new expiring tokens and the security risks they still pose.
GitHub CLI's New Expiring Tokens Still Leave Your Refresh Token Exposed to Malware
suzuki-shunsuke.hashnode.dev…
I'm releasing new versions of my OSS projects, including aqua, pinact, and ghtkn, to address the eMudhra CA certificate compromise.
Please update them.
aqua v2.65.0 had an issue, so I've released aqua v2.65.2 and aqua-installer v4.1.1 to fix it.
If you encounter the error `the asset isn't found: multiple.intoto.jsonl`, it's been fixed in these releases.
Shunsuke Suzuki retweeted
🚨 UPDATE: India has launched a special investigation into eMudhra after 8 intermediate CA private keys were found trivially recoverable.
CERT-In and Red Hat have issued fresh security alerts as the fallout extends beyond Chrome, Firefox, and Go.
Read - thehackernews.com/2026/10/ei…
Advantages of ghtkn over GitHub CLI's expiring tokens
github.com/suzuki-shunsuke/g…
Shunsuke Suzuki retweeted
Not just PHP. Node.js has also announced security releases for October 21, with HIGH-severity vulnerabilities affecting its 26.x, 24.x and 22.x release lines.
If you run either stack in production, keep an eye on official advisories and apply patches promptly.
Security maintenance doesn't stop at your application code. Your runtime matters too.
Node.js advisory: nodejs.org/en/blog/vulnerabi…
Shunsuke Suzuki retweeted
Commits now include a durable, authenticated pusher identity alongside author and committer info in the UI and API.
• New commit rule blocks pushes if committer metadata doesn’t match the pusher’s verified email
github.blog/changelog/2026-1…
Shunsuke Suzuki retweeted
aqua is a declarative CLI version manager. One config file, lazy install, and it plays nicely with Renovate so tool versions stop drifting across machines.
github.com/aquaproj/aqua
I'm not familiar with Nix, but looks like ghatm, pinact, and ghalint are available.
But aqua isn't. 🤔
github.com/search?q=repo%3AN…
Shunsuke Suzuki retweeted
We’re launching the Anthropic Cyber Mission, a new effort to secure critical infrastructure and open-source software.
anthropic.com/news/anthropic…
Oh, /stargazers is now limited to admins and collaborators 😨
github.com/orgs/community/di…
Wow! Renovate now officially updates aqua-installer's aqua_version 🎉
github.com/renovatebot/renov…
aqua v2.64.0 and aqua-installer v4.1.0 are out 🎉
You can now install only the packages specified in command-line arguments.
This avoids GitHub API errors and prevents an access token from being passed to commands that don't need it during lazy install.
github.com/aquaproj/aqua-ins…
