snarky.ca / .snarky-ca

There have been several security incidents lately that involved compromising GitHub Actions workflows. This has led some to say "GitHub Actions is the weakest link" in publishing and to GitHub publishing a GitHub Actions security roadmap update. But ...

While I decide what to do with PEP 832 after polling folks on their opinion, I thought I would write out why I'm even bothering with any of this. I'm going to talk from the perspective of VS Code and its Python extensions, but you could just as ...