Skip to content
vxvx
GitHubBlueskydev.toRSS

// the vx blog

security

Posts tagged security.

RSS

An upgrade you can trust

vx upgrade checks the SHA-256 before it replaces anything, and swaps back if the new binary does not start. Every release carries signed provenance. And a CLI that refuses 0x10 instead of guessing.

A task sees only the env it names

Your shell holds dozens of variables, and some of them are credentials. A vx task gets a short fixed list plus the names you write down, and any value that looks like a secret prints as ***.

Turborepo, Nx and other product names are trademarks of their owners. vx is not affiliated with or endorsed by them.