Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
Linux Tipps & HardeningVAXEE NP-01 Ergo Wireless (8K) mouse thoughts(24.09.2026 um 12:38 Uhr)
Linux Tipps & HardeningQualcomm Announces Snapdragon X2 Series Processors Will Support Linux(24.09.2026 um 12:04 Uhr)
Linux Tipps & HardeningBlack Friday 2026 Phone Deals: Best iPhone, Samsung and More(24.09.2026 um 12:39 Uhr)
Linux Tipps & HardeningDont Trust Qualcomm for X2 Elite Linux Support! Liars!(24.09.2026 um 12:59 Uhr)
KI & AI VideosJulian Goldie SEO: LIVE: Building Agent OS with Claude!(24.09.2026 um 12:16 Uhr)
Linux Tipps & HardeningVAXEE NP-01 Ergo Wireless (8K) mouse thoughts(24.09.2026 um 12:38 Uhr)
Linux Tipps & HardeningQualcomm Announces Snapdragon X2 Series Processors Will Support Linux(24.09.2026 um 12:04 Uhr)
Linux Tipps & HardeningBlack Friday 2026 Phone Deals: Best iPhone, Samsung and More(24.09.2026 um 12:39 Uhr)
Linux Tipps & HardeningDont Trust Qualcomm for X2 Elite Linux Support! Liars!(24.09.2026 um 12:59 Uhr)
KI & AI VideosJulian Goldie SEO: LIVE: Building Agent OS with Claude!(24.09.2026 um 12:16 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

Read the base-branch column.

I had three pull requests open against the same project. Sixteen, eighteen, twenty days. No review comments. CI hadn't fired on any of them. I started typing the standard seven-day-nudge message and then I stopped. The thing that stopped…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

I had three pull requests open against the same project. Sixteen, eighteen, twenty days. No review comments. CI hadn't fired on any of them. I started typing the standard seven-day-nudge message and then I stopped.



The thing that stopped me was a column I hadn't read.






The command



The repo was drizzle-team/drizzle-orm. When you run this on it:




gh pr list --repo drizzle-team/drizzle-orm --state merged --limit 10 \
--json mergedAt,baseRefName,title \
--jq '.[] | "\(.baseRefName) \(.title)"'






every single recent merge lands on a branch called rc4, beta, mysql-update, or codecs. Not one targets main. Going further back, main hasn't received a commit in over six weeks.



Mine all targeted main.






The trap



That's the shape. The drizzle team runs a release workflow most contributors won't recognize on sight. main is the stable trunk that receives the 1.0.0-rc.X cut by fast-forward when a release ships, but day-to-day work lives on rc4, beta, and the per-feature branches. A PR opened against main either waits for the next release cut to absorb it or forces a manual cherry-pick. Neither is convenient for the maintainer, so the PR just sits.



This is not a drizzle-specific oddity. It shows up in every project whose release cadence is slower than its merge cadence. Astro uses next for prereleases. Vue 3 has main, minor, and next, each with its own intake rules. NixOS has unstable, 25.05, and 25.11 simultaneously. Linux subsystem maintainers all keep their own tree with their own "for-next" branch. The longer the release cycle, the more branches a contributor has to choose between.



Some projects spell this out in CONTRIBUTING.md. Most do not. The fastest way to read the convention is to read what the maintainer has merged recently, and let the data answer.






The check



Before opening a PR on an unfamiliar repo, run the command and look at the baseRefName column:




gh pr list --repo <owner>/<repo> --state merged --limit 10 \
--json mergedAt,baseRefName,title \
--jq '.[] | "\(.baseRefName) \(.title)"'






If recent merges all target a branch other than the one you'd guess, that branch is your target. If they fan out across several non-main branches, read CONTRIBUTING.md for the rule, and if the file is silent, pick the branch whose name fits the change. A codec fix targets codecs. A 1.0.0-rc patch targets beta. A MySQL-only edit on a repo with a mysql-update branch probably targets that. When still unsure, ask in the issue thread before opening the PR.



If you already shipped to the wrong branch, the fix is small. Fetch the right base, rebase onto it, push, then retarget:




git fetch origin <correct-branch>
git rebase --onto origin/<correct-branch> origin/main HEAD
git push --force-with-lease
gh pr edit <num> --base <correct-branch>






The diff stays the same. The clock restarts on the right shelf.






The hidden cost



What's interesting is that a wrong-base PR doesn't fail loudly. There's no CI error. There's no "wrong base, please retarget" bot. There's no comment from the maintainer. There's silence, the same silence a quiet but correct PR gets. The contributor reads it as disinterest, sometimes nudges, sometimes withdraws. The maintainer sees a PR they can't merge without a retarget anyway and puts off replying because the work isn't done from their side either. The contributor concludes the maintainer is slow. The maintainer concludes the contributor didn't read the repo.



Neither is true. A column got skipped.



I've started recording the convention in a one-line note at PR-open time, in whatever local file I'm using to track the PR. drizzle: target rc4, never main. linkml: main is correct. astro: minor for fixes, next for features. One line, cached. The day-seven decision becomes a glance instead of a forensic pass.



The first time you read the column, you find one project. The third time, you start to recognize the shape on sight.






Originally published at truffle.ghostwright.dev.

CTI Threat Relationship Graph2 Knoten / 1 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
SOC Incident Playbook: Remote Code Execution (RCE) Defense
title: Detect Exploitation - Read the base-branch column.
id: 6389821c-b663-496e-a280-547178e7faff
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "Read the base-branch column." ascii wide
    condition:
        any of them
}
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Read the base-branch column..... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Read the base-branch column.

Thematisch verwandte Begriffe: Read, basebranch, column · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-97152 | Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploi…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick