search
API design
Trends
- 1GhostAction campaign plants credential-stealing workflows across thousands of GitHub repos▼⚠️ CRITICAL: Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories The GhostAction c
A campaign dubbed GhostAction is compromising GitHub maintainer accounts and injecting malicious Actions workflows into tens of thousands of repositories. The injected workflows are designed to steal secrets such as API keys, tokens, and other credentials from the affected projects. Security researchers are urging maintainers to audit their workflow files, rotate exposed secrets, and review repository permissions, as the malicious code can run automatically in CI environments where sensitive tokens are routinely available.
- 2Developer shares progress on Rust query system with new proc macros●My query system is coming together really nicely, but I forgot to post about it! Two massive updates: I wrote some proc
A developer working on a query system has announced two major updates after a posting lapse. The main news is the addition of procedural macros, written in a few hours, which redesigned the API to look much more like Salsa, the incremental computation framework used in the Rust compiler. The work appears to be part of an ongoing personal compiler or language tooling project.
- 3AI agent paid an invoice twice due to retry bug●The agent paid the invoice once. Then the model regenerated the tool call for a retry, kept the same... # ai # security
An AI agent paid an invoice once, then on retry regenerated the tool call while keeping the same idempotency key but with different arguments, causing concern about duplicate or mismatched payments. Developers are highlighting that systems should refuse a request when a reused idempotency key arrives with changed parameters, a lesson in safely designing API retries for autonomous software agents.
Repos
- cloudflare/cf The agentic CLI for the entire Cloudflare API