nyell

I lived in Germany for four years, but no longer there. I got 42% German / 20% Autistic grade and I am not European at all.

Never bought a Samsung phone, TV or Fridge. Smart is now translating into "Ad-injection" in various appliances and I hope this backfires!

Simple. Upscale and hop onto new roles created by AI

I am working on Scharf, an open-source SAST tool to identify and auto-fix 3P GitHub actions those are prone to supply-chain attacks. It is blazing fast and written in Go.

Project link: https://github.com/cybrota/scharf

Quick demo: https://imgur.com/a/wEyk9AR

This tool can cutdown hours of grind for Security engineers.

I am building "Scharf", a blazing-fast security scanner for reporting and hardening third-party GitHub actions.

For whoever aware of recent `tj-actions/changed-files` security incident, I built a mutable-reference scanner that performs a deep scan across branches to identify all third-party GitHub actions used in organization Git projects. The output report can be exported to CSV or JSON (default).

Using mutable references (version tags, main/master/dev etc.) is a security vulnerability that can result in supply-chain attacks.

Project link:

https://github.com/cybrota/scharf

Whispr is created to enable secure software development by simplifying developer experience.

It is easy for developers to place their database credentials in a `.env` file for local testing and accidentally commit them to a version control system.

Even not committed, storing credentials as plain text is a risk as per MITRE ATT&CK Framework: credential access.

Whispr helps you store nothing locally and provides on-demand, Just In Time (JIT) secret access for applications. It supports AWS, Azure and GCP secret vaults.

Best part is no bash scripts nor CLI commands required. The tool is language & application agnostic.

It is not just for storing variations of a prompt. It separates context to make intentions clear. Here is a XMl prompt serialized from PromptML program:

https://gist.github.com/narenaryan/651d8081eaaffa846e05da7a3...

You can test it with Claude and GPT-3.5 or GPT-4o, and they all will bring strikingly bring similar results with differences in detail.

YAML & XML serializations are coming in v0.6.0 of PromptML.

Hi there. Your question is valid. That's why we built Prompt Markup Language:

https://github.com/narenaryan/promptml/ https://www.promptml.org/

It isn't XML nor JSON, but a DSL built especially for writing prompts. We do not have published benchmarks but running few examples, we see consistent outputs from LLM, and supplements RAG by separating context and using it for enriching prompt.

That's a great question. Right now, we don't have that feature incorporated, but we do thought about hydrating existing bookmarks and making it part of memory graph. Chrome's bookmark API is so primitive, and we have seen many issues keeping things in sync (being cautious here..).

I took your point down. Thanks for brining it forward.

I am hearing many complaints from new developers learning Python. Here I made an attempt to clear those doubts in mind with possible explanations.