HomeAI · summaries
Storia in 3 fonti
Disrupting supply chain attacks on npm and GitHub Actions
Explore the changes we've shipped across npm and GitHub Actions over the past few months to disrupt supply chain attack techniques and limit their impact.
Confronto fonti
3 prospettive sulla stessa storiaTimeline cronologica
- ·
github.blog
GitHub Actions holds potentially malicious workflows for approval - GitHub Changelog
Recent supply chain attacks use compromised GitHub credentials to push malicious GitHub Actions workflows that steal CI/CD credentials and carry out additional attacks. To help…
- ·
Disrupting supply chain attacks on npm and GitHub Actions
Explore the changes we've shipped across npm and GitHub Actions over the past few months to disrupt supply chain attack techniques and limit their impact.
