OpenAI Official Security-Best-Practices: Performing Security Reviews of AI According to Languages and Frameworks
OpenAI has provided the `security-best-practices` Skill in the `curated` directory of the openai/skills repository. It includes 10 security specifications for common frameworks in Python, JavaScript/TypeScript and Go, and supports secure-by-default coding, passive inspection and structured security reporting. This article introduces its workflow, references library, Codex/Cursor installation methods and typical prompts, to help developers embed verifiable security review capabilities into AI-assisted programming.
Read MoreGit Repository Backup: A Comprehensive Plan for Regular Backups and Restorations
Git repository backup is crucial for ensuring code security, as it encompasses code, historical records, and branch information. Local corruption, accidental deletion by remote users, or platform failures can all lead to code loss, making regular backups essential. The core principles include multiple backups (local + remote), regular execution, and verification of recovery. For local backups: Copy the repository folder (using `cp -r` for Linux/Mac and direct copying for Windows), with regular updates. For remote backups: Utilize multi-platform backup strategies (e.g., associating two remote addresses) and export using `git bundle` to mitigate platform-specific risks. Automated backups are more reliable: Use `crontab` for Linux/Mac to schedule scripts, and Task Scheduler for Windows. In case of recovery, local corruption can be addressed by overwriting with backups, while remote corruption can be resolved by cloning or using `bundle` files. Key considerations: Separate backup paths, retain the `.git` directory, and conduct regular recovery tests. Adopting the habit of "regular local copying + multi-platform remote backups" ensures code security.
Read More