You are here |
securitylab.github.com | ||
| | | |
shipit.dev
|
|
| | | | A little guide on how to trigger Github Actions workflows when a PR has been closed while distinguishing whether is has been merged or not. | |
| | | |
adnanthekhan.com
|
|
| | | | In this post, I cover how I discovered a CI/CD misconfiguration in the Release Drafter GitHub action and demonstrated how it could have directly impacted a Google owned open-source repository (and many more!) that used it by tag instead of SHA. | |
| | | |
github.blog
|
|
| | | | Improve your GitHub Actions security posture by securing your source repository, protecting your maintainers, and making it easy to report security incidents. | |
| | | |
snapcraft.io
|
|
| | Virtualisation plays a huge role in almost all of today's fastest-growing software-based industries. It is the foundation for most cloud computing, the go-to methodology for cross-platform development, and has made its way all the way to 'the edge'; the eponymous IoT. This article is the first in a series where we explain what virtualisat [...] |