Back to article
securitylab.github.com

Keeping your GitHub Actions and workflows secure: Preventing pwn requests (2021) (opens in new tab)

Covered by 7 sources See all sources covering this story including theregister, heise onlineDiscussed on Hacker News

Covered in 7 articles

theregister·

TanStack weighs invitation-only pull requests after supply chain attack

Discussed on Hacker News
Feeds
github.blog·

Safer pull_request_target defaults for GitHub Actions checkout

Feeds
Datadog Security Labs·

The case for GitHub Actions security after recent supply chain attacks

Feeds
neciudan.dev·

https://neciudan.dev/github-actions-poisoning

Discussed on r/netsec, r/node, and r/programming
Feeds
cncf.io·

Securing CI/CD for an open source project: Controlling who runs what

Feeds

In other languages

heise online·

Nach Cyberangriffen: TanStack prüft Einschränkungen für Pull-Requests

Feeds
habr.com·

Безопасность GitHub Actions: модель угроз, атаки и меры защиты. Часть 1

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help