GitHub Artifact Attestations: Verify Build Provenance Before You Deploy
GitHub artifact attestations connect release artifacts to signed build provenance. Here is how to generate them and verify the right identity.
The Orthogonal blog
Notes on software, AI, and systems.
Source-based guides and practical explanations for people who build with technology. Explore the ideas, inspect the evidence, and understand the trade-offs.
Recently published
Latest articles
Meta Muse for Developers: Tasks, Privacy, and the 1B Token Claim
A source-based guide to Meta's Muse agent, practical evaluation tasks, privacy controls, and what to check before using referral code KC3TPF.
SSH Server Hardening in 2026: A Version-Aware sshd_config Guide
A version-aware OpenSSH guide to key-only authentication, case-safe effective-config checks, bounded key audits, idle timeouts, and safe rollout.
Browser Fingerprinting Defenses in 2026: Options and Limits
Compare Firefox, Brave, Chrome, Safari, and Tor fingerprinting defenses, interpret privacy tests, and understand mobile permission limits.
yfinance 1.6.0: Practical Python Stock Data, Live Streaming, and Equity Screening
Source-checked yfinance 1.6.0 examples for historical data, WebSocket callbacks, EquityQuery screening, MultiIndex columns, and bounded retries. Tested offline.
Choosing an NVMe SSD for Docker Builds: Capacity, Endurance, and Cooling
Choose Docker build storage by builder location, capacity, endurance, cooling, and compatibility—not an unverified SSD ranking.
Explore the blog
Find your next topic
AI and developer workflows
Agents, coding tools, and the limits behind the launch claims.
Open guideSecurity and privacy
Authentication, data boundaries, and checks you can inspect.
Open guideDevOps and homelabs
Delivery pipelines, self-hosting, storage, and recovery.
Open guideAPIs and data engineering
Data sources, Python workflows, and financial-data limitations.
Open guideRead in depth
Selected guides
SSH Server Hardening in 2026: A Version-Aware sshd_config Guide
A version-aware SSH rollout with a tested login and recovery route.
Read field noteyfinance 1.6.0: Practical Python Stock Data, Live Streaming, and Equity Screening
Source-checked Python examples and the boundaries of offline testing.
Read field noteBrowser Fingerprinting Defenses in 2026: Options and Limits
Browser privacy controls, their trade-offs, and what a fingerprinting test cannot prove.
Read field noteSupporting projects
Tools from the blog
Optional utilities, not a requirement for reading or following a guide.
Images
QuickShrink
Compress and convert images before publishing or sharing them.
Read the introductionDeveloper utilities
HashForge
Generate and compare hashes for text or files.
Read the introductionDeveloper utilities
RegexLab
Test and debug regular expressions against sample text.
Read the introductionFollow or discuss
RSS updates. Practical discussion.
Follow published guides in your feed reader, or ask a build question in the moderated onsite community. Email updates are not enabled. Free tools need no account or subscription.