Tag

#GitHub Actions

3 articles tagged #GitHub Actions.

Cybersecurity/Supply Chain Security·Jul 21, 2026·5 min read

GitHub Actions Just Closed the Pwn Request Window: What actions/checkout v7 Changes

Enforcement of actions/checkout's new pull_request_target protections landed July 20, 2026, closing the exact hole the AsyncAPI attack used six days earlier. Here's what changed, who needs to act, and how to check your own workflows.

GitHub ActionsSupply Chain AttackCybersecurity

Read

The AsyncAPI Generator Attack: A pull_request_target Misconfig Becomes an npm Compromise

P.02

Cybersecurity/Supply Chain·Jul 15, 2026·5 min read

The AsyncAPI Generator Attack: A pull_request_target Misconfig Becomes an npm Compromise

A GitHub Actions misconfiguration let an attacker open dozens of pull requests, steal a privileged bot token, and push a malicious @asyncapi/generator release to npm. Here's what happened and how to check your own workflows.

Supply Chain AttacknpmGitHub Actions

Read

GitHub Actions in 2026: Faster Pipelines, Smaller Bills

P.03

Cloud & Infrastructure/DevOps·May 11, 2026·8 min read

GitHub Actions in 2026: Faster Pipelines, Smaller Bills

Most teams treat their CI pipeline as a black box that occasionally fails. A few hours of optimization can cut your CI time by 40-60% and your GitHub Actions bill by a similar margin. Here's exactly how to do it.

GitHub ActionsCI/CDDevOps

Read