Tootfinder

#TIL that there is also a pre-commit check for uv audit: https://www.python4data.science/en/latest/productive/security.html#codecell3

Security
In previous chapters, we have already provided some tips designed to help ensure safer operation. Here, we would like to summarise and expand on the individual elements once again. We will be using...

I'm wondering how plausible it would be for the new ngscopeclient CI to have a private web form (probably just restricted by simple https basic auth with creds shared among project maintainers) to request a build of a specific commit in order to enable testing of PRs.
The idea is that this will still allow pre-testing of PR content before we merge them, but won't allow any possibility for an outside attacker to trigger a build on our infrastructure without a maintainer at least…