Topic
Everything filed under github-security, across every section.
Harden a repository-level GitHub Actions pipeline with immutable action references, least-privilege tokens, environment-gated deployments, artifact checksums, and audit-friendly logs. Includes a practical workflow you can adapt for Node.js projects.
Use audit-only testing, false-positive measurement, and a two-tier policy to tune GitHub push protection custom patterns. Block credentials that create immediate exposure; route ambiguous matches into a warning-and-review workflow.
Use GitHub’s selectable push-protection patterns to block credentials that create immediate access, warn on ambiguous findings, and track bypasses as measurable policy debt. Includes a pilot plan, a tiering matrix, and exception metrics.