Back in March, I wrote The Comforting Lie of SHA Pinning, after spending rather too much of my Monday investigating the supply-chain compromise with Trivy and discovering something worrying about how GitHub Actions resolves dependencies.
I’ll be speaking at Yorkshire DevOps’ fourth anniversary event on Thursday, 5th November 2026Q, hosted by Lloyds Banking Group at their Wellington Place office in Leeds. The talk is based on my article, The Comforting Lie Of SHA Pinning.
This week, AWS have announced Lambda Web Functions, which, after fighting with Amplify for the last few years, made me drop what I was doing and have a play.
I was thinking the other day how much I missed StumbleUpon.
I’ll be speaking in person at DevOps Nottingham on Tuesday, 25th August 2026 at Fothergill House. The talk is based on my article, The Comforting Lie Of SHA Pinning.
