🤖 GitHub Actions - gbakes · Scour

actions-cool/issues-helper GitHub Action Compromised: All Tags Point to Imposter Commit That Exfiltrates CI/CD Credentials ⚡Ruff

stepsecurity.io·1d·Hacker News

GitHub Actions: Upcoming image migrations ⚡Ruff

github.blog·6d

Awesome Repo 🔧Dagster

github.com·21h·r/GithubCopilot

Pullfrog 💻Command Line Tools

pullfrog.com·15h

Rundeck – AWS Enterprise Rundeck Integration with Azure Runner 🔄Data Pipelines

techcommunity.microsoft.com·1d

https://neciudan.dev/github-actions-poisoning 📦uv

neciudan.dev·9h·r/node, r/programming

GitHub Actions Supply Chain Attack Redirects Tags to Steal CI/CD Credentials ⚡Ruff

thehackernews.com·1d

The Week the Toolchain Became the Kill Chain 📦uv

blog.vertexops.org·3d·DEV

Trusted Publishing for NPM Packages 📦uv

docs.npmjs.com·1d·Hacker News

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK 📦uv

venturebeat.com·11h

OpenAI says no user data was touched in the TanStack npm worm 📦uv

thenextweb.com·6d

Scheduled GitHub Actions are now useless 💻Command Line Tools

viblo.se·2d·Hacker News

Grafana breach caused by missed token rotation after TanStack attack ⚡Ruff

bleepingcomputer.com·12h

The Trojan PR: Achieving Code Execution in GitHub Actions via Pipeline Poisoning 📦uv

infosecwriteups.com

·2d

Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft 📦uv

microsoft.com·10h

Anthropic Introduces Routines for Claude Code Automation 🏭Factory Automation

🎲 Test Timeouts in Gleam 🧪pytest

gearsco.de·18h

TanStack npm Packages Hit by Mini Shai-Hulud 📦uv

`gcloud run compose up`: Deploy a Multi-Service GPU Stack to Cloud Run from Docker Compose 💻Terminal Emulators

·2d

Writing setup docs for an AI: a pattern for small, complex projects 📦uv

Log in to enable infinite scrolling