How to Pin and Verify GitHub Actions to Stop Supply Chain Poisoning
See a floating GitHub Actions tag get silently poisoned in a...
Browse Tag
CI/CD Security
5 Articles
How to Scope GitHub Actions Permissions to Least Privilege With actionlint
Learn how to scope GitHub Actions workflow permissions to least...
Docker’s OIDC Push Turns GitHub Actions Security Into an Organization-Tier Feature
Docker's new OIDC support kills stored GitHub Actions...
A Practical Software Supply Chain Security Checklist for Development Teams
A hands-on checklist for development teams: pin trusted inputs,...
Miasma Worm Disables Microsoft GitHub Repos and Exposes a New CI/CD Weak Point
GitHub disabled 73 Microsoft repositories after a Miasma-linked...