GegsOS 🇦🇲🇺🇲

GegsOS

[GegsOS 🇦🇲🇺🇲 @GeghamOS]

https://t.co/GkiqGCx6X2

[Ayaan 🐧 @twtayaan]

DevSecOps CI/CD Pipeline Cheat Sheet:

➡️ Git – Developers commit code and trigger the pipeline.

➡️ Secret Detection – Prevents API keys, passwords, and tokens from being committed.

➡️ SBOM Scan – Generates a Software Bill of Materials to track dependencies.

➡️ SAST – Scans source code for security vulnerabilities before building.

➡️ Unit Tests – Verifies application logic and prevents regressions.

➡️ Dockerfile Scan – Detects insecure Dockerfile configurations and bad practices.

➡️ Build – Compiles the application and creates the container image.

➡️ Container Image Scan – Identifies vulnerabilities in the built image.

➡️ DAST – Tests the running application for exploitable security issues.

➡️ Smoke/API Tests – Confirms the application is functioning after deployment.

➡️ Deploy – Releases the application to the Kubernetes cluster.

➡️ Kubernetes CIS Scan – Checks cluster configuration against CIS security benchmarks.

➡️ Kubernetes Manifest Scan – Validates Kubernetes YAMLs for security and policy issues.

➡️ Container Signing – Cryptographically signs images to verify authenticity.

➡️ Container Validation – Ensures only trusted and compliant images are deployed.

➡️ Test Environment – Validates changes before production rollout.

➡️ Production Environment – Deploys the approved release to end users.

➡️ Monitoring – Continuously tracks logs, metrics, alerts, and application health.

Every stage is a checkpoint. Skip one, and you increase the risk of shipping insecure software.

[Tom Dörr @tom_doerr]

Open-source meeting bot API for Google Meet, Teams, and Zoom with real-time transcription

https://t.co/FkDdhnvs4G

[GitHub Projects Community @GithubProjects]

Goose is a database migration tool that supports both SQL and Go-based migrations for managing schema changes across multiple databases.

- Works with Postgres, MySQL, SQLite, ClickHouse, MSSQL, and more
- Supports Go migrations written as plain functions
- Handles out-of-order migrations and embedded migrations
- Allows environment variable substitution in SQL migrations

Explore it here:
https://t.co/pPpZP1IwYj

[Tom Dörr @tom_doerr]

Turns browsers into offensive security suites

https://t.co/cyyk7LdFLs

[GitHub Projects Community @GithubProjects]

Awesome-Selfhosted is a curated index of free, open-source software you can run on your own servers instead of relying on third-party services.

- Covers analytics, backup, communication, CRM, and more
- Lists only Free Software as defined by the GNU project
- Includes both network services and web applications
- Maintained with automated checks for dead links and unmaintained projects

Explore it here:
https://t.co/rK6x8rNzQb

[How To Prompt @HowToPrompt__]

China has killed the entire vector database industry.

They open-sourced TencentDB Agent Memory. It gives any AI agent long-term memory that runs 100% locally.

No Pinecone. No cloud APIs. No repeating yourself every session.

- 61% fewer tokens
- PersonaMem accuracy: 48% → 76%
- Zero external API dependencies
- Runs on plain SQLite

Most memory systems compress your history into an opaque vector pile. when recall goes wrong, you're guessing. this one doesn't compress, it builds a semantic pyramid.

L0 Conversation → L1 Atom → L2 Scenario → L3 Persona.

Short-term state gets encoded as a Mermaid graph in your agent's context. verbose tool logs get offloaded to disk. when the agent needs proof, it drills back via node_id to the exact raw log.

no lossy compression. every layer is readable markdown you can just open and inspect.

5.1k stars. 100% Open Source.

[GitHub Projects Community @GithubProjects]

OpenHands Agent Canvas is a self-hosted control center that lets you run multiple coding agents across local, cloud, and remote backends as an always-on engineering team.

- Run OpenHands, Claude Code, Codex, or any ACP-compatible agent
- Create automations that integrate with Slack, GitHub, and Linear
- Switch between local, Docker, VM, and cloud backends without losing context
- Bring your own LLM and agent server infrastructure

Explore it here:
https://t.co/FPM1eokLkB

[Tom Dörr @tom_doerr]

Infrastructure as code for a Proxmox and Kubernetes homelab

https://t.co/LI5ZsRTSZK

[Tom Dörr @tom_doerr]

Open-source face recognition system with landmark, mask, and demographic detection.

https://t.co/1hHpuIHPcg

[Vivek | Cybersecurity @VivekIntel]

🦝 Raccoon – Open-Source Reconnaissance & Information Gathering Framework

Raccoon is an open-source reconnaissance and information gathering tool built to automate the early stages of authorized security assessments. It combines DNS enumeration, WHOIS lookups, TLS analysis, port and service scanning, subdomain discovery, directory and file fuzzing, web application fingerprinting, WAF detection, HTML form extraction, email harvesting, robots.txt and sitemap analysis, and cloud storage exposure checks into a single workflow. Built with Python's asyncio for improved performance, Raccoon supports Tor and proxy routing, integrates with Nmap and OpenSSL, and organizes results into structured output files for efficient analysis. Its simple CLI and broad feature set make it useful for penetration testers, bug bounty hunters, and security researchers performing reconnaissance on systems they are authorized to assess.

🔗 https://t.co/LcBnXLLCn6

#CyberSecurity #Recon #OSINT #PenetrationTesting #OpenSource

[Dhanian 🗯️ @e_opore]

10 Linux Management Tools Worth Deploying in Your Home Lab This Weekend

Grab Linux ebook: https://t.co/YmVhAkcj5o

[そう｜Claude Codeで始めるAI自動化 @so_ainsight]

どんなWebサイトのデータも自動で引き出せるGitHubリポジトリ10選：

1. Firecrawl
URLを渡すだけでサイト全体を自動巡回し、AIがすぐ使えるクリーンなデータに変換する。JavaScriptで描画されるページも対応、GitHubトップ100入りの14万★。
https://t.co/ShC7Ed9Wbz

2. Crawl4AI
どんなサイトもLLMがそのまま読み込めるテキストに整える。APIキー・課金不要、16ドル（約2,400円）を請求する有料サービスに嫌気がさした開発者が数日で作り、7万★を獲得した。
https://t.co/RHdEGHJvy3

3. browser-use
クリック・ログイン・フォーム入力まで人間のようにブラウザを操作するAIエージェント。スイスの名門工科大学ETH Zurich発（同大の学生が創業）のスタートアップが開発し、10万★を獲得。
https://t.co/bDao4MLSqr

4. Crawlee
接続元の自動切替・再試行・ブラウザ識別情報偽装・待機列管理をすべて搭載したデータ収集基盤。アクセスブロック回避の仕組みが一式揃っている。
https://t.co/dD7FHjbYtz

5. Scrapy
10年以上使われてきた本格的なデータ収集ツール。数百万ページを安定処理でき、大規模収集の実績も豊富で、ずっと無料。
https://t.co/HhnKZwr7wa

6. MarkItDown
PDF・Office文書・HTML・画像などをまとめてテキスト化するMicrosoft製ツール。ソースコード公開で無料。
https://t.co/bPMSRRrbLa

7. Scrapling
サイトのデザイン変更に自動で適応し、ブロック検知を回避し続けるデータ収集ツール。有料のブロック回避サービス並みの機能を無料で使える。
https://t.co/fGtwvNTDIB

8. scrcpy
PCからAndroid端末をリモート操作・自動化でき、Web版のないモバイル専用アプリへの足がかりになる14万★ツール。
https://t.co/nW3PnEcalV

9. AutoScraper
収集したいデータの例を1つ渡すだけでパターンを自動学習し、残りを一括取得する。取得対象の指定コードが不要で、数行のPythonで動く。
https://t.co/Qs6cqGsySz

10. curl-impersonate
本物のChromeのブラウザ識別情報を模倣するHTTP通信ツール。リクエストが実在の人間からのものに見えるため、高額なアンチボット対策をかいくぐれる。
https://t.co/VbVGDYYHCZ

[Amarillo @anyelamarillo]

Un abogado pierde una semana en un contrato de 500 páginas.
Un contador, cuatro días en 200 facturas.
Un investigador, dos semanas en 50 PDFs.
Todos copiando y pegando.

MinerU lo cambia todo.

Herramienta gratuita y de código abierto que convierte cualquier PDF, Word, Excel o imagen escaneada en Markdown limpio en segundos:
• Texto en orden correcto
• Tablas en HTML
• Ecuaciones en LaTeX
• OCR potente
• 109 idiomas

Un PDF de 200 páginas → Markdown perfecto en 90 segundos.
Funciona en CLI y Python. Corre en tu PC. 100% privado.
Más de 68.000 estrellas en GitHub.

La abogada: contrato listo en 4 min.
El contador: 200 facturas en 12 min.
El investigador: revisión lista en una tarde.

Adiós papeleo manual. Bienvenido tu tiempo.

[Tom Dörr @tom_doerr]

Jams Bluetooth, WiFi, and RC signals using an ESP32.

https://t.co/BwFAfIP5dw

[Tom Dörr @tom_doerr]

Runs local face recognition with facial landmark detection

https://t.co/V7HnOlWLsP

[Kubesploit @kubesploit]

Kubeconform is a Kubernetes manifests validation tool

Similar to Kubeval, but with the following improvements:

➀ High performance
➁ Remote or local schema locations
➂ Up-to-date schemas for all recent versions of Kubernetes

➤ https://t.co/QsPGO7cyXr

[Vivek | Cybersecurity @VivekIntel]

🛡️ Anthropic Cybersecurity Skills - The Largest Open-Source Cybersecurity Skills Library for AI Agents

Anthropic Cybersecurity Skills is a collection of 754 production-grade cybersecurity skills across 26 security domains, designed to give AI agents structured workflows for DFIR, Threat Hunting, Threat Intelligence, Cloud Security, Web Security, Pentesting, Malware Analysis, SOC Operations, and more.

Each skill is mapped to MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, MITRE D3FEND, and NIST AI RMF, making it a powerful knowledge base for Claude Code, Copilot, Cursor, Gemini CLI, Codex CLI, LangChain, CrewAI, AutoGen, and other AI agent platforms.

🔗 https://t.co/SfV3E8nI0G

#CyberSecurity #ThreatIntel #DFIR #SOC #AIAgents #MITRE #InfoSec

[Vivek | Cybersecurity @VivekIntel]

⚙️ n8n CyberSecurity Workflows - 100+ Security Automation Blueprints

A collection of 100+ cybersecurity workflow ideas for n8n covering Red Team, SOC, DFIR, Threat Intelligence, AppSec, DevSecOps, Cloud Security, and Security Operations.

Includes automation playbooks for IOC enrichment, threat intel ingestion, phishing triage, vulnerability management, attack surface monitoring, subdomain reconnaissance, SAST/DAST pipelines, cloud security auditing, incident response, and SOAR-style workflows using tools like Nmap, Nuclei, ZAP, Semgrep, Trivy, VirusTotal, Shodan, MISP, Splunk, Elastic, CrowdStrike, AWS, Azure, and GCP.

🔗 https://t.co/hg3ulWUJvi

#CyberSecurity #n8n #SecurityAutomation #SOC #DFIR #AppSec #DevSecOps

[Tom Dörr @tom_doerr]

Agentic SOC platform automating security investigations

https://t.co/JeigtSBwLG

[Tom Dörr @tom_doerr]

Curated list of AI code editors, agents, and completions

https://t.co/2CHxDpZtz6