The case for GitHub Actions security after recent supply chain attacks (opens in new tab)

GitHub Actions workflows are vulnerable to pwn requests, script injection, and compromised credentials. Here's what's going wrong and what's changing.