Back to article
pavel.gr

Finding Unpinned and Unpinnable GitHub Actions Across Your Org (opens in new tab)

Covers 4 stories See all stories this covers including Static Analysis for GitHub ActionsDiscussed on Hacker News

Covers 4 related stories

GitHub·

Static Analysis for GitHub Actions

Discussed on Hacker News
Feeds
stepsecurity.io·

actions-cool/issues-helper GitHub Action Compromised: All Tags Point to Imposter Commit That Exfiltrates CI/CD Credentials

Discussed on Hacker News
Feeds
stepsecurity.io·

Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos

Discussed on Hacker News and Lobsters
Feeds
stepsecurity.io·

Trivy Compromised a Second Time - Malicious v0.69.4 Release, aquasecurity/setup-trivy, aquasecurity/trivy-action GitHub Actions Compromised

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help