Mastodon Feed: Post

andrewnez ("Andrew Nesbitt") wrote:

https://github.com/coder/coder/security/advisories/GHSA-vx42-ghc9-gw65

Pretty bad, if they had implemented TUF, maybe not so bad?

https://nesbitt.io/2026/05/24/signing-is-for-the-bad-days.html