Jauder Ho

Tom, A few observations: * I'm of the opinion of picking either a tag starting with a v or not but not both * It's unclear how much value is...

Let's pick up when you get back into the swing of things. For reference, here is a .goreleaser.yml that you can work off of for SBOM generation and signing. Start...

- Not everyone uses Homebrew so maybe there should be a flag disabling the check - I believe recent versions of MacOS now use LibreSSL instead OpenSSL (still shipped) so...

This PR does not generate the same output as the existing array. Not all upstream repos are built off of a version tag, some are built using HEAD (esp. if...

I'm open to considering this as long as it remains easy to reason about. It may be easier just to extract the REPO array to a separate file to be...

> as of nginx-quic its missing in the ACTION array > > https://github.com/jauderho/dockerfiles/blob/d19f8af4dfb0b7583e6721ef63ba87f7cc412871/scripts/rebuildAllGo.sh#L34-L38 > > do you want that i it exclude in the build of the ACTION array /...

I'm also working on updating the continuous build for macOS to: * remove macos-11 as it is deprecated * add macos-13 and macos-14 * update to latest GitHub Actions as...

I already do this on my image of testssl.sh. You can use this workflow as a starting point: https://github.com/jauderho/dockerfiles/blob/main/.github/workflows/scan.yml

As of OpenSSH 8.2, the team appears to moving towards deprecating ssh-rsa. See https://www.openssh.com/releasenotes.html#8.2 > It is now possible[1] to perform chosen-prefix attacks against the SHA-1 hash algorithm for less...

I took another run at this after thinking more about it and think I'm part of the way there. Just need to figure out how to pass cache files in...