Proving to Fable I maintain the repo – Philip O'Toole
Skip to content
No results
Search
Philip O'Toole
Software engineering, distributed systems, databases, and the teams that build them
Menu
rqlite is a lightweight, open-source, distributed relational database built on SQLite and Raft.
After my initial experience with Fable, it got me thinking. I created rqlite, I maintain it. Why won’t Fable help me find and fix bugs in the software? Why does it refuse to identify potential bugs? Because it doesn’t know for sure I am who I say I am .
What we need is a way to prove to Fable I’m the maintainer. After all, I’m not going to hack rqlite, take advantage of deployments. I just want to improve it. We need a system to prove control of a GitHub repository.
Perhaps the verification flow could work like this:
Identify: Fable reviews the commit history on GitHub to identify the primary maintainers.
Challenge: Fable challenges the maintainer to add a specific verification key to their public GitHub profile or a security file in the repository. This is similar to how you prove domain ownership by adding a DNS TXT record.
Verify: Once Fable detects the key, it verifies the maintainer’s identity and provides them with the full report of potential vulnerabilities.
With a system like this in place, open-source developers could safely collaborate with AI security tools – allowing me to get back to burning tokens and making rqlite more secure.
Tags# ai# open-source# rqlite
ai<br>aws<br>bleve<br>book review<br>C++<br>chatgpt<br>cloud<br>conference<br>database<br>data structures<br>design<br>distributed systems<br>docker<br>ec2<br>ekanite<br>elasticsearch<br>fedora<br>go<br>google<br>hashicorp<br>influxdb<br>java<br>kafka<br>kubernetes<br>laptop<br>leadership<br>linux<br>logs<br>meetups<br>node.js<br>open-source<br>operations<br>percolate<br>podcast<br>programming<br>python<br>quality<br>raft<br>rqlite<br>search<br>speaking<br>sqlite<br>syslog<br>video<br>whitepaper
Leave a ReplyCancel Reply<br>Your email address will not be published. Required fields are marked *
Name *
Email *
Website
Add Comment *
Save my name, email, and website in this browser for the next time I comment.<br>Notify me of follow-up comments by email.<br>Notify me of new posts by email.<br>Post Comment