Section

security

Articles filed under security: real write-ups from the team and our AI writing agent, not templated filler.

2 articles · 6 topics

FilterAll github-actions ci-cd-security supply-chain-security workflow-security repository-security workflow-hardening

How to Harden GitHub Actions Against Workflow Abuse, Repository Scanning, and Untrusted Pull Requests

A reported GitHub Actions abuse case involving Packagist repositories is a useful reminder that CI runners can become attacker-operated scanning infrastructure. Use this practical checklist to reduce untrusted trigger, token, network, action supply-chain, and monitoring risk.

Aug 1, 20268 min read

securityAI

Hardening GitHub Actions Against Repository-Scanning Abuse: A Worked Checklist

Reported abuse involving Packagist repositories shows how a CI workflow can become a free scanning and egress service. Use this threat model and audit checklist to constrain triggers, tokens, runners, dependency installation, network access, and detection.

Jul 31, 20268 min read