RayJSeth's comments

On: Just redesigned my personal site with a TTY-style interface

[RayJSeth]

Love seeing folks passion projects like this! Feels very old-web, not just stylistically, but also just the culture of folks making things that _they_ want to and just putting them out there.

I recently put a minor terminal-ish toy on my personal site https://rayjseth.io/ as an excuse to play with the infra to build/deploy go-wasm+Next in Vercel.

Always feel like those labor of love tangent projects are the best place to grow new skills :)

On: Git security vulnerability announced

[RayJSeth]

This certainly came as a surprise to my team today.

We operate some number of repositories and the majority of them use https://github.com/actions-ecosystem/action-get-latest-tag - or more specifically, a fork of that repo which more or less works the same way.

Midday today our CI/CD started failing. We must have hit this so soon because the `apk add git` in that Dockerfile grabbed the new git version. Evidently the SID that ultimately executed the git command inside the included actions' dockerfile was not the same as the one that owned `/github/workspace` on the runner.

We were able to patch around using the new `safe.directory` option, but I'm curious to see if there's more fallout since CI/CD environments in particular create this sort of shared repository.

[__turbobrew__ → RayJSeth]

This is why I pin all dependencies in CI/CD.