Blog Entries

10. 09. 2026 Francesco Belacca Development

Measuring Post-Quantum Security in Go and .NET

TL;DR Results: GitHub Actions run 32970330873 at commit 1846eb4a863015cbc0a3c75431b42d138b8706c3 This experiment measures two different workloads in Go 1.27 and .NET 10/.NET 11(preview): It used one ubuntu-24.04 runner, 20 independent process samples, and 100 measured operations per sample. For TLS, the cleanest comparison is classical versus hybrid within the same implementation and, for .NET, the same OpenSSL provider…

Read More
26. 06. 2025 Gabriele Bocchi Automation, Development, DevOps

How to Secure GitHub Actions with SHA Pinning

GitHub Actions offer a powerful and flexible infrastructure for CI/CD, deployments and monitoring. But every external dependency we include opens a potential door for supply-chain attacks. One simple, effective, and low-cost way to seal that door is pinning your Actions to specific commit SHAs. In this article, we’ll explore the risks, walk through how to…

Read More
12. 09. 2024 Mattia Codato Development, DevOps

Publish NPM Package to GitHub Packages Registry with GitHub Actions

With the rise of continuous integration and delivery (CI/CD) in modern software development, automating tasks like publishing npm packages has become crucial for efficiency. GitHub packages Registry (npm.pkg.github.com) allows developers to host and manage npm packages directly within GitHub, offering a seamless experience for both private and public repositories. By leveraging GitHub Actions, developers can…

Read More

Archive