# ephemerality

Published articles for ephemerality.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Wolfi at work: Minimal developer workstations in the cloud

DevFeed: [Wolfi at work: Minimal developer workstations in the cloud](<https://devfeed.tech/articles/wolfi-at-work-minimal-developer-workstations-in-the-cloud-13338.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/wolfi-at-work-minimal-developer-workstations-in-the-cloud>)

Published: 2024-05-29T00:00:00Z

Content type: tutorial

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Cloud](<https://devfeed.tech/topics/cloud.md>), [chainguard](<https://devfeed.tech/topics/chainguard.md>), [Linux](<https://devfeed.tech/topics/linux.md>), [Terraform](<https://devfeed.tech/topics/terraform.md>), [Automation](<https://devfeed.tech/topics/automation.md>), [Security](<https://devfeed.tech/topics/security.md>), [Visual Studio Code](<https://devfeed.tech/topics/visual-studio-code.md>), [ssh](<https://devfeed.tech/topics/ssh.md>)

Tags: [automation](<https://devfeed.tech/tags/automation.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [developer](<https://devfeed.tech/tags/developer.md>), [ephemerality](<https://devfeed.tech/tags/ephemerality.md>), [linux](<https://devfeed.tech/tags/linux.md>), [minimalism](<https://devfeed.tech/tags/minimalism.md>), [security](<https://devfeed.tech/tags/security.md>), [ssh](<https://devfeed.tech/tags/ssh.md>), [terraform](<https://devfeed.tech/tags/terraform.md>), [visual-studio-code](<https://devfeed.tech/tags/visual-studio-code.md>), [wolfi](<https://devfeed.tech/tags/wolfi.md>)

### AI overview

Chainguard describes using minimal Wolfi-based cloud workstations to provide standardized, ephemeral development environments for engineers. The workstations use regularly rebuilt and attested images, automatic timeouts, and Terraform-managed resources to keep packages current and reduce configuration differences.

### Source excerpt

Secure development environments with cloud workstations powered by Chainguard's Wolfi. Learn how to reduce attack surface and improve developer productivity.

## Audited least privilege

DevFeed: [Audited least privilege](<https://devfeed.tech/articles/audited-least-privilege-12893.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/audited-least-privilege>)

Published: 2024-05-13T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Access Control](<https://devfeed.tech/topics/access-control.md>), [IAM](<https://devfeed.tech/topics/iam.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [identity and access management](<https://devfeed.tech/topics/identity-and-access-management.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>), [SIEM, Security, Observability](<https://devfeed.tech/topics/siem-security-observability.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>)

Tags: [access-control](<https://devfeed.tech/tags/access-control.md>), [audit](<https://devfeed.tech/tags/audit.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [defense-in-depth](<https://devfeed.tech/tags/defense-in-depth.md>), [ephemerality](<https://devfeed.tech/tags/ephemerality.md>), [identity-and-access-management](<https://devfeed.tech/tags/identity-and-access-management.md>), [identity-management](<https://devfeed.tech/tags/identity-management.md>), [least-privilege](<https://devfeed.tech/tags/least-privilege.md>), [logs](<https://devfeed.tech/tags/logs.md>), [minimalism](<https://devfeed.tech/tags/minimalism.md>), [security](<https://devfeed.tech/tags/security.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [trust](<https://devfeed.tech/tags/trust.md>)

### AI overview

The article presents audited least privilege as a cloud security model that complements fine-grained IAM grants with fine-grained IAM audit log policies. It emphasizes minimizing access by level, scope, and duration, then monitoring resource access to verify that only expected identities use provisioned resources.

### Source excerpt

Strengthen your software supply chain security with audited least privilege. Learn how Chainguard's approach minimizes risk and enhances trust.

## Replacing Long-Lived GitHub Personal Access Tokens with Short-Lived Credentials Using Octo STS

DevFeed: [Replacing Long-Lived GitHub Personal Access Tokens with Short-Lived Credentials Using Octo STS](<https://devfeed.tech/articles/the-end-of-github-pats-you-can-t-leak-what-you-don-t-have-13250.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/the-end-of-github-pats-you-cant-leak-what-you-dont-have>)

Published: 2024-04-11T00:00:00Z

Content type: tutorial

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [GitHub](<https://devfeed.tech/topics/github.md>), [Security](<https://devfeed.tech/topics/security.md>), [octo sts](<https://devfeed.tech/topics/octo-sts.md>), [GitHub Actions](<https://devfeed.tech/topics/github-actions.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>)

Tags: [ephemerality](<https://devfeed.tech/tags/ephemerality.md>), [github](<https://devfeed.tech/tags/github.md>), [github-actions](<https://devfeed.tech/tags/github-actions.md>), [github-credentials](<https://devfeed.tech/tags/github-credentials.md>), [github-pat](<https://devfeed.tech/tags/github-pat.md>), [github-personal-access-token](<https://devfeed.tech/tags/github-personal-access-token.md>), [least-privilege](<https://devfeed.tech/tags/least-privilege.md>), [minimalism](<https://devfeed.tech/tags/minimalism.md>), [octo-sts](<https://devfeed.tech/tags/octo-sts.md>), [personal-access-token](<https://devfeed.tech/tags/personal-access-token.md>), [principle-of-ephemerality](<https://devfeed.tech/tags/principle-of-ephemerality.md>), [pull-requests](<https://devfeed.tech/tags/pull-requests.md>), [rotation](<https://devfeed.tech/tags/rotation.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [security](<https://devfeed.tech/tags/security.md>), [security-token-service](<https://devfeed.tech/tags/security-token-service.md>)

### AI overview

This article explains how Chainguard replaced long-lived GitHub Personal Access Tokens and other credentials with short-lived credentials across several GitHub organizations. It introduces Octo STS as a Security Token Service for GitHub credentials and describes the automation use cases that built-in GitHub Actions tokens could not support.

### Source excerpt

Ditch GitHub PATs for better security. Learn how to replace long-lived tokens and reduce your risk of leaked credentials.

## Embrace ephemerality with default disappearing messages

DevFeed: [Embrace ephemerality with default disappearing messages](<https://devfeed.tech/articles/embrace-ephemerality-with-default-disappearing-messages-1754.md>)

Original publisher: [Read original article](<https://signal.org/blog/disappearing-by-default/>)

Published: 2021-08-10T00:00:00Z

Content type: release

Language: en

Sources: [Signal Blog](<https://devfeed.tech/sources/signal-blog.md>)

Topics: [data](<https://devfeed.tech/topics/data.md>)

Tags: [data](<https://devfeed.tech/tags/data.md>), [devices](<https://devfeed.tech/tags/devices.md>), [ephemerality](<https://devfeed.tech/tags/ephemerality.md>), [history](<https://devfeed.tech/tags/history.md>), [install](<https://devfeed.tech/tags/install.md>), [storage](<https://devfeed.tech/tags/storage.md>), [time](<https://devfeed.tech/tags/time.md>)

### AI overview

Signal introduces default disappearing-message timers for new conversations and customizable durations ranging from 60 seconds to 4 weeks. The feature automatically deletes messages for senders and recipients, helping limit retained conversation history and save device storage.

### Source excerpt

As the norms for how people connect have changed, much of the communication that once took place through the medium of coffee shops, bars, and parks now takes place through the medium of digital devices. One side effect of this shift from analog to digital is the conjoined shift from the ephemeral to the eternal: words once transiently spoken are now - more often than not - data stored forever. We've designed Signal so that your data always stays in your hands. We think there's something special about sharing a private fleeting moment between friends, so Signal also supports disappearing messages. Now, we've added the ability to preconfigure all conversations you initiate with a default disappearing messages timer. Read more...

## Signal beta adds view-once photos and videos for Android and iOS

DevFeed: [Signal beta adds view-once photos and videos for Android and iOS](<https://devfeed.tech/articles/sometimes-once-is-better-than-a-lifetime-1871.md>)

Original publisher: [Read original article](<https://signal.org/blog/view-once/>)

Published: 2020-01-06T00:00:00Z

Content type: release

Language: en

Sources: [Signal Blog](<https://devfeed.tech/sources/signal-blog.md>)

Topics: [releases](<https://devfeed.tech/topics/releases.md>), [Android](<https://devfeed.tech/topics/android.md>), [iOS](<https://devfeed.tech/topics/ios.md>)

Tags: [android](<https://devfeed.tech/tags/android.md>), [ephemerality](<https://devfeed.tech/tags/ephemerality.md>), [ios](<https://devfeed.tech/tags/ios.md>), [persistence](<https://devfeed.tech/tags/persistence.md>), [releases](<https://devfeed.tech/tags/releases.md>), [signal](<https://devfeed.tech/tags/signal.md>), [videos](<https://devfeed.tech/tags/videos.md>)

### AI overview

Signal's Android and iOS beta releases add view-once media messages. Individual photos and videos are removed from the conversation thread after they are viewed, with an empty indicator retained for context.

### Source excerpt

Today's beta releases of Signal for Android and iOS include a new way to send individual photos and videos that are automatically removed from a conversation thread after they have been viewed. Read more...