Viewing profile — prdonahue

Chainguard | Product Manager, Scanner | REMOTE | Full-Time | https://www.chainguard.dev/ Chainguard is the trusted source for open source. We build hardened, minimal, continuously-…

They're used quite a bit for nerve entrapment—both in diagnosing and treating.

> Anyone know of a better way to protect yourself than setting a min release age on npm/pnpm/yarn/bun/uv (and anything else that supports it)? Most of these attacks don't make it i…

Hmm, we just bought my wife an annual subscription at the Pro tier, largely to use Claude Code. Wonder if she'd be grandfathered in or if we'll need to get a refund.

Isn't this sort of repeated communication gaffe why they hired @OfficialLoganK?

Do any of the bug bounty programs let you filter by some scoring of the source reporter? Seems like it’d be helpful to bury mass reporters in a de facto spam bucket (where “mass” i…

I stopped reading the article because of it.

And you moved at a glacial pace compared to Cloudflare. There are tradeoffs.

Nice, are you collaborating with developers at your company? Or is this more for personal use?

We're now a few years out from the Docker licensing fiasco. Who has successfully migrated their company to an alternative? What is working well and what's not?

Chainguard | Senior and Staff-level Product Managers and Engineers, and Engineering Managers | REMOTE (US/CAN) We're building the safe, trusted source for open source. We created t…

It's the same principle as a company blocking access to domains registered in the past 30 days. Doing so eliminates a huge percent of phishing/malware as these domains are typicall…

We're taking a very different[1] approach at Chainguard. Essentially: building the world from GitHub repos on SLSA L2 hardened infra and delivering directly to our customers to byp…

Yeah, they've clearly been given some minimal company line and aren't deviating from it. Not going to win any trust.

We're primarily an AWS shop but some Oracle BDR assigned to cover us recently reached out on LinkedIn. I asked for an incident report and received this terse response: > There has …

Vibe security.

Do you have any affiliation with Elevenlabs?

I'm looking for a way to run a model locally that will listen to Zoom calls and create notes for me. Want to make sure that notes (and audio) stay private to my machine. What are m…