Bobo Lin | AI & Open Source

Exploring AI, cybersecurity & open source
Sharing useful GitHub finds 🧑‍💻
Learning in public, one tool at a time

[Bobo Lin | AI & Open Source @KomatsuSo68]

Your GitHub Actions might be a bigger security risk than your code.

In 2025, a compromised GitHub Action affected 23,000+ repositories.

I found zizmor — an open-source tool that scans your GitHub Actions for leaked credentials, excessive permissions, injection vulnerabilities, and unsafe third-party Actions.

The scary part?

Your CI has access to your secrets, and every third-party Action is code you’re trusting to run inside it.

Check your YAML. 👀

https://t.co/nIhKU3Ov4G

[Bobo Lin | AI & Open Source @KomatsuSo68]

@JorgePutranto 我来串门了

[Bobo Lin | AI & Open Source @KomatsuSo68]

@JorgePutranto 回来了回来了

[Bobo Lin | AI & Open Source @KomatsuSo68]

前几天我时间线上的兄弟们呢，今天怎么刷不到了？

[Bobo Lin | AI & Open Source @KomatsuSo68]

Hiding the reasoning made Codex way less fun to use.

So I switched to DeepSeek Harness.

My setup: Codex account → sub2api → DeepSeek Harness

It’s fast, responsive, and honestly feels much lighter for most tasks.

Codex can feel a bit overengineered sometimes.

Simple tools win.

[Bobo Lin | AI & Open Source @KomatsuSo68]

@WenBuilds 对，太无聊了，只能刷x了

[Bobo Lin | AI & Open Source @KomatsuSo68]

codex把思考过程隐藏后

等他干活就变得更无趣了

我推荐用deepseek harness

可以sub2API把自己的账号转出API，接入deepseek harness使用

实测结果不错，反馈快，省的无聊

对大部分任务来说，codex本身的设计有些太重了

deepseek harness干干净净，正好

[Bobo Lin | AI & Open Source @KomatsuSo68]

@something2520 不了不了，就是纯玩的

[Bobo Lin | AI & Open Source @KomatsuSo68]

心累了，今天尝试了各种自动化测试，都失败了，难道真的只有手搓一条路吗？

[Bobo Lin | AI & Open Source @KomatsuSo68]

@linxilab 对!还把思考过程全部隐藏了，一个问题干等几十分钟，无聊透顶。以前看看思考过程还挺有意思。

[Bobo Lin | AI & Open Source @KomatsuSo68]

codex桌面版越更新越难用

有同感的举手🙌🏻

[Bobo Lin | AI & Open Source @KomatsuSo68]

@linxilab @hua7248 这就看怎么调教Agent了

[Bobo Lin | AI & Open Source @KomatsuSo68]

@ishlaw 串门啦!

[Bobo Lin | AI & Open Source @KomatsuSo68]

我今天继续用5.6 sol的时候

发现他总是雷霆大思考

你们也遇到了吗？

[Bobo Lin | AI & Open Source @KomatsuSo68]

@bangbuilds 自由

[Bobo Lin | AI & Open Source @KomatsuSo68]

codex升级后

彻底把思考过程隐藏了

[Bobo Lin | AI & Open Source @KomatsuSo68]

@Jacobaaaaa154 plus只能搭配中转站食用，不然不够啊

[Bobo Lin | AI & Open Source @KomatsuSo68]

@cxknh5z 撸起袖子加油干

[Bobo Lin | AI & Open Source @KomatsuSo68]

@Jacobaaaaa154 h哈罗哈罗

[Bobo Lin | AI & Open Source @KomatsuSo68]

@cxknh5z 唉，兵来将挡水来土掩吧，也得想办法适应了

[Bobo Lin | AI & Open Source @KomatsuSo68]

数据分析还打不开，这是几个意思呢

[Bobo Lin | AI & Open Source @KomatsuSo68]

@cxknh5z 我也刷到有大佬分析，改机制也得想办法适应啊，唉

[Bobo Lin | AI & Open Source @KomatsuSo68]

@yjc1333621 刚开始，大家都在想办法研究机制

[Bobo Lin | AI & Open Source @KomatsuSo68]

粉丝量只要加人就会涨

但是曝光量，惨不忍睹呀！

[Bobo Lin | AI & Open Source @KomatsuSo68]

@SuraAvinash2 你好呀