corpus.blog
41,554 blogs · 4,654,352 posts Claim your blog
Record · corpus.blog/posts/01a08720-17b5-72a9-8c95-fd73e2074bcb

Turning Almost Nothing into a Supply Chain Compromise of Angular with GitHub Actions Cache Poisoning

adnanthekhan.com · published 3 March 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at adnanthekhan.com Wayback capture
1blogs citing
First cited
23 May 2026
Most recent
23 May 2026
Rank this month
not ranked
External links
17
Words captured
3,763

Cited by

Blog
In the post
Date
josephhall.org
Squeezing the Balloon: Why Securing the Open Source Build Process is Only the Beginning Read at the source ↗
23 May 2026

Links from this post

Link
Host
https://github.com/angular/angular
github.com
https://github.com/angular/dev-infra/pull/3296
github.com
https://github.com/angular/dev-infra
github.com
https://github.com/angular/dev-infra/blob/7769f229c54aca9973a8d510ade6c42225079998/.github/workflows/test-required-workflow.yml
github.com
https://github.blog/changelog/2025-11-20-github-actions-cache-size-can-now-exceed-10-gb-per-repository/
github.blog
https://docs.github.com/en/actions/reference/workflows-and-actions/dependency-caching
docs.github.com
https://github.com/adnaneKhan/cacheract
github.com
https://github.com/adnanekhan/cacheract
github.com
https://github.com/angular-robot
github.com
What the fork? Imposter commits in GitHub Actions and CI/CD Read at the source ↗
chainguard.dev
https://github.com/not-an-aardvark/lucky-commit
github.com
https://github.com/angular/angular/blob/c9ffd2efe3aab5ad951e5947c7cb0e441421e01b/.github/workflows/dev-infra.yml
github.com
https://api.github.com/apps/angular-robot
api.github.com
https://docs.github.com/en/apps/creating-github-apps/authenticating-with-a-github-app/generating-an-installation-access-token-for-a-github-app
docs.github.com
https://github.com/angular/dev-infra/blob/main/.github/workflows/ng-renovate.yml
github.com
https://trustwallet.com/blog/announcements/trust-wallet-browser-extension-v268-incident-community-update
trustwallet.com
https://securitylab.github.com/resources/github-actions-untrusted-input/
securitylab.github.com
Elsewhere on adnanthekhan.com (1)