Tag: GitHub Actions
All the articles with the tag "GitHub Actions".
- 11 min read
Tags Are Not Pins: The GitHub Actions Trust Model Has a Foundational Problem
Git tags are mutable pointers, not immutable package hashes. When attackers gain the ability to move tags to imposter commits, standard CI/CD hardening advice breaks down entirely.
- 3 min read
Hardening GitHub Actions Workflows
GitHub Actions is powerful and widely trusted — which makes misconfigured workflows a high-value attack target. Here's how to lock them down.