A new release of asfald, our downloader transparently validating chksums! github.com/asfaload/asf... Most important feat: report vulnerability window,i.e. time between publication and mirroring of chksums. During that time an attacker could update file in release undetected. #buildinpublic #release

Starting a new project from scratch in a new language is often a trial and error approach. Such is the case for the implementation of our generic multisig signoff solution in #rustlang As we #buildinpublic, you can follow progress at github.com/asfaload/asf... Only 3 commits at this time ;-)

github.com/joernio/joern is a multi language code analysis tool. Its release checksums are mirrored by Asfaload to increase the security of downloading it. Check how at asfaload.com/asfald/ #codeanalysis #opensource

Just discovered #buildinpublic, which is what I've done with asfaload.com but without any public :-). It started with the goal to provide authenticated downloads, but became a more general multisig sign-off solution. All developed in the open and under open source licenses (AGPLv3 or MPLv2) 🧵

With its checksums on the Asfaload mirror, Regal github.com/StyraInc/regal , a linter for #policy definitions used by the open policy agent www.openpolicyagent.org/docs, a #cncf graduate project , can be downloaded with additional security, see www.asfaload.com/asfald/

Ever missed Freshmeat? This is for you: get a continuously updated stream of newly published Github releases at www.freshstuff.net And releases whose checksums files are mirrored by Asfaload are marked as such

A new release of @cloudflare.social 's pint, the #prometheus rule #linter has been published at github.com/cloudflare/p..., and its checksums are already available on asfaload's mirror to let you download with increased security. Check how at www.asfaload.com/asfald/ #security

github.com/pdfcpu/pdfcpu is a #pdf processing library in #go that you can download with additional #security using asfald (see www.asfaload.com/asfald/ )

Need to export your Slack data? this tool can help github.com/rusq/slackdump and as it publishes checksums in its release, our checksums mirror increases the security of your downloads, check out how at www.asfaload.com/asfald/ #slack #export #data #tool

Convert your images on the fly to webp thanks to github.com/webp-sh/webp... which can be downloaded with increased safety using asfald, for more info see www.asfaload.com/asfald/ #webp #server #golang

@neovim.io released version 0.11, a significant release available at github.com/neovim/neovi...! With our checksums mirror you can download it with additional security. Check out how at asfaload.com/asfald #neovim

Rancher Labs' GKE and AKS operators can be downloaded with additional security guarantees with asfald, check how here: www.asfaload.com/asfald Their releases are at github.com/rancher/gke-... and github.com/rancher/aks-... #security #k8s #Cloud

Today's project discovery: github.com/EricCrosson/... Group your commits by issue into Github PRs. Lets you work on one branch and push to distinct PRs afterwards. Check how to download it with additional safety at www.asfaload.com/asfald/ #github #git #softwaredevelopment

#terraform providers are often published with checksums. That's also the case of the huawei cloud provider: github.com/huaweicloud/... See how you can download it with automatic checksums validation at asfaload.com/asfald

Friday project discovery: Permify (github.com/Permify/perm...) is an open source authorization as a service inspired by Google Zanzibar, and as they publish checksums, it can be downloaded with additional safety with asfald: www.asfaload.com/asfald/ #security #authorization

The copies on our mirror of checksums are now taken much more rapidly. This reduces even more the attack window (eg replacing a file and its checksums file). For example the checksums of this pulumi release were taken less than 3 mins after release: github.com/asfaload/che...

We had a breakthrough in our search of a satisfying procedure to handle lost and compromised keys, as well as account reinitialisation. All possible without having to trust. Will formalise all this, looking forward to have it implemented! #security #multisig #signature #softwaresupplychain

Looking at our checksums mirror allows me to discover some niche software, this week it is a shipping pack optimiser: github.com/obalunenko/s... Download it with additional confidence with our downloader asfald: www.asfaload.com/asfald/ #software #shipping #optimization

My 15 minutes lightning talk at @fosdem.bsky.social about Asfaload is now online at fosdem.org/2025/schedul... #fosdem #lightning #video

@tur.so 's modern evolution of sqlite github.com/tursodatabas... can be downloaded with added security with @asfaload.bsky.social's tool www.asfaload.com/asfald. Give it a try, it gets and validates checksums from an independent source in addition to the github release.

Just added the release-revocation process in our spec at github.com/asfaload/spe... Next process to add: how do we handle a key compromise. Follow this issue if you're interestd: github.com/asfaload/spe... As always, interested in questions, comments, remarks. Let me know here or on github.

Adding some test to our backend. Using FsHttp is a pleasure, as is using it in tests combined with Suave. And as FsHttp's Apache 2 license is compatible with our choice of AGPLv3, I copied some test helpers making it even easier. I hope you're fine with it @schlenkr.bsky.social #fsharp

Here is friday's discovery of a project which can be downloaded more safely with our downloader asfald: github.com/Escape-Techn... lets you determine the cloud / hosting provider of a given host. See how to use asfalod at www.asfaload.com/asfald/ #friday #project #discovery #security

I'm giving an ignite talk @cfgmgmtcamp.bsky.social tuesday about increasing security of internet downloads with Asfaload. 15s per auto-advancing slides, will be fun! Details and slides at www.asfaload.com/blog/cfgmgmt... #cfgmgmt #talk #security

I'm giving a #lightning #talk @fosdem.bsky.social today about securing downloads from the internet with @asfaload.bsky.social . Details at fosdem.org/2025/schedul...

Today's project discovery is Gitleaks github.com/gitleaks/git... which lets you detect secrets you might have committed . As Gitleaks publishes checksums it is downloadable with increased security using asfald (see www.asfaload.com/asfald/) #git #secrets #security

Friday project discovery time! github.com/yassinebenai... is a shell script to golang compiler. You can download it with increased safety with asfald (see www.asfaload.com/asfald/) #go #bash #shell #compiler

Smithy is a language for defining services and SDKs and is downloadable from github.com/smithy-lang/... with asfald (www.asfaload.com/asfald/) #friday #project #discovery

This week's project you can download more safely thanks to asfald is the mozilla project sccache: github.com/mozilla/scca..., used as a compiler wrapper and avoiding compilation when possible. Learn how to use asfald at www.asfaload.com/asfald/ #friday #discovery #security #mozilla

Today's project to discover is museeks.io , a music player. Download it safely from github.com/martpie/muse... with github.com/asfaload/asf... #friday #project #discovery

Sent talk proposals to www.fosdem.org. Current status: 1 rejected, 1 accepted, 1 pending. #happy Decided to share this following mathstodon.xyz/@tao 's post : mathstodon.xyz/@tao/1137211... Rejected proposals are no catastrophe and are rather normal when you are enthousiast about your project. #cfp

This friday's project discovery: github.com/depado/platy... is a mock server to abstract external services. Downloadable with github.com/asfaload/asf... ! #friday #discovery #github

Unikraft's github.com/unikraft/kra... is this week's project publishing checksums mirrored by asfaload. KraftKit is a framework for building lightweight unikernel vms. See how to increase your safety when downloading kraftkit: www.asfaload.com/blog/friday-... #friday #project #discovery #github

Here is the first #friday #project #discovery entry, sharing a project publishing checksums of their release, and mirrored by asfaload: github.com/cgwire/kitsu . It is a collaboration tool for animation and vfx prod by www.cg-wire.com

Securely download Github Releases artifacts in your Github workflows with asfald-action: www.asfaload.com/blog/asfald-... Github action: github.com/marketplace/... #github #security

My #fsadvent entry: Using fsx scripts as a viable starting point for a #fsharp project: www.asfaload.com/blog/fsharp-... /cc @sergeytihon.com

Asfald v0.4.0 was released last week. Additionally compares checksum on mirror with checksum in original release. See github.com/asfaload/asf...

Our mirror of checksums files, automatically used by our download tool asfald is finally officially announced! A significant step in our journey to secure downloads from the internet! www.asfaload.com/blog/asfaloa... #security #SoftwareSupplyChain

Why you should consider #fsharp despite the downsides listed for full transparency: www.asfaload.com/blog/conside...