Blog

Insights on software development, security, and technology from our team.

Showing posts taggeddeveloper-tooling

Git 2.56.1 patches six vulnerabilities, and your CI runners need it more than your laptop does

Git 2.56.1 and backported releases for six older versions fix six security vulnerabilities. The worst one can run attacker code during a recursive clone. Here's why build pipelines and Docker images are where the real exposure sits, and what we'd patch first.