Episode Details
Back to EpisodesEpisode 281 - Signing Models, Vibe Coding, GitHub Action Abuse
Published 1 year, 2 months ago
Description
The duo are back for a discussion on securing machine learning models using Sigstore, based on a recent blog post from Google Security. Followed by some spicy takes on opinions on vibe coding and its effects on application and product security. Finally, short-lived tokens used to exploit RCE against the GitHub CodeQL Action.