andi- changed the topic of #nixos-security to: Vulnerability Roundup Issues: https://github.com/NixOS/nixpkgs/issues?utf8=%E2%9C%93&q=is%3Aissue+is%3Aopen+Vulnerability+roundup + https://broken.sh | Currently supported releases: unstable (master), 20.09, 20.03 (until 27th of November)
Synthetica has quit [Quit: Connection closed for inactivity]
star_cloud has quit [Ping timeout: 268 seconds]
star_cloud has joined #nixos-security
rajivr has joined #nixos-security
cole-h has quit [Ping timeout: 240 seconds]
Synthetica has joined #nixos-security
Shaadx has joined #nixos-security
Shaadx has quit [Ping timeout: 240 seconds]
Shaadx has joined #nixos-security
Shaadx has quit [Quit: Leaving]
Irenes has quit [Ping timeout: 250 seconds]
Irenes has joined #nixos-security
star_cloud has quit [Ping timeout: 245 seconds]
{`-`} has joined #nixos-security
IdleBot_d6dff8fb has quit [*.net *.split]
julm has quit [*.net *.split]
flx has quit [*.net *.split]
cemguresci[m] has quit [*.net *.split]
SushiDude[m] has quit [*.net *.split]
Valodim has quit [*.net *.split]
prusnak has quit [*.net *.split]
gchristensen has quit [*.net *.split]
zgrep has quit [*.net *.split]
simpson has quit [*.net *.split]
tokudan has quit [*.net *.split]
{^_^} has quit [*.net *.split]
ajs124 has quit [*.net *.split]
sphalerite has quit [*.net *.split]
supersandro2000 has quit [*.net *.split]
aminechikhaoui has quit [*.net *.split]
asymmetric has quit [*.net *.split]
V has quit [*.net *.split]
kgz has quit [*.net *.split]
bridge[evilred] has quit [*.net *.split]
WilliButz has quit [*.net *.split]
julianst[m] has quit [*.net *.split]
kalbasit[m] has quit [*.net *.split]
thefloweringash has quit [*.net *.split]
feepo has quit [*.net *.split]
Synthetica has quit [*.net *.split]
justanotheruser has quit [*.net *.split]
midchildan_ has quit [*.net *.split]
nh2 has quit [*.net *.split]
Raito_Bezarius has quit [*.net *.split]
davidtwco has quit [*.net *.split]
swapgs has quit [*.net *.split]
andi- has quit [*.net *.split]
nf has quit [*.net *.split]
flokli has quit [*.net *.split]
bennofs has quit [*.net *.split]
das_j has quit [*.net *.split]
eyJhb has quit [*.net *.split]
tv has quit [*.net *.split]
Foxboron has quit [*.net *.split]
energizer has quit [*.net *.split]
lukegb has quit [*.net *.split]
pie_ has quit [*.net *.split]
edef has quit [*.net *.split]
jpo has quit [*.net *.split]
maljub01 has quit [*.net *.split]
primeos has quit [*.net *.split]
danderson has quit [*.net *.split]
samueldr has quit [*.net *.split]
hexa- has quit [*.net *.split]
nh2[m] has quit [*.net *.split]
colemickens has quit [*.net *.split]
ddima has quit [*.net *.split]
jdnixx-M has quit [*.net *.split]
cwnovusordoseclo has quit [*.net *.split]
danielrf[m] has quit [*.net *.split]
rajivr has quit [*.net *.split]
mcint has quit [*.net *.split]
qyliss has quit [*.net *.split]
elvishjerricco has quit [*.net *.split]
ehmry has quit [*.net *.split]
tldr32 has quit [*.net *.split]
lassulus has quit [*.net *.split]
c4rc4s has quit [*.net *.split]
raboof has quit [*.net *.split]
ikwildrpepper has quit [*.net *.split]
aanderse has quit [*.net *.split]
JJJollyjim has quit [*.net *.split]
Ox4A6F has quit [*.net *.split]
Yakulu[m] has quit [*.net *.split]
immae has quit [*.net *.split]
MichaelRaskin has quit [*.net *.split]
dotlambda has quit [*.net *.split]
blueberrypie has quit [*.net *.split]
ris has quit [*.net *.split]
hax404 has quit [*.net *.split]
mschwaig has quit [*.net *.split]
stigo has quit [*.net *.split]
ivan has quit [*.net *.split]
alexbakker has quit [*.net *.split]
rajivr has joined #nixos-security
mcint has joined #nixos-security
WilliButz has joined #nixos-security
mschwaig has joined #nixos-security
midchildan_ has joined #nixos-security
Valodim has joined #nixos-security
bennofs has joined #nixos-security
nh2[m] has joined #nixos-security
tv has joined #nixos-security
MichaelRaskin has joined #nixos-security
eyJhb has joined #nixos-security
MichaelRaskin has quit [Remote host closed the connection]
star_cloud has joined #nixos-security
MichaelRaskin has joined #nixos-security
<qyliss> makes me nervous about potential future self-merge for nixpkgs...
<gchristensen> yes, this is the cornerstone of my conern as well
<MichaelRaskin> Me: not even sure one cannot leak a token using the actions already enabled
<MichaelRaskin> And a token here means a boring all-write token
<lukegb> You mean "the only one GitHub Actions provides"? :P
<MichaelRaskin> That's why it is the boring one!
<lukegb> I wish you could specify capabilities on actions
cole-h has joined #nixos-security
Willi_Butz has joined #nixos-security
WilliButz has quit [*.net *.split]
bridge[evilred] has joined #nixos-security
rajivr has quit [Quit: Connection closed for inactivity]
star_cloud has quit [Ping timeout: 240 seconds]
star_cloud has joined #nixos-security
Synthetica has joined #nixos-security
ajs124 has joined #nixos-security
das_j has joined #nixos-security
cole-h has quit [Quit: Goodbye]
cole-h has joined #nixos-security
Synthetica has quit [Quit: Connection closed for inactivity]
supersandro2000 has joined #nixos-security
<hexa-> some issues in shibboleth-sp
<hexa-> the 3.2.2 update should be released within the hour or so
<hexa-> it has been bumped, but not tagged
<hexa-> we are far behind on that package (3.0.4.1)
<hexa-> $ nix-update shibboleth-sp --version 3.2.2
<hexa-> whenever