41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a08773-4017-7205-b182-ea2eb24dc7fb

Pin Your GitHub Actions to Protect Against Supply Chain Attacks

emmer.dev · published 23 August 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at emmer.dev Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 12
Words captured: 976

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/actions/checkout

github.com

https://github.com/actions/checkout/releases/tag/v5.0.0

github.com

https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/immutable-releases

docs.github.com

https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised

stepsecurity.io

https://github.com/tj-actions/changed-files

github.com

https://gist.github.com/stevebeattie/1847841fb3b1bfbf6d8449ae2fb0e8a2

gist.github.com

https://docs.github.com/en/actions/reference/security/secure-use

docs.github.com

https://www.mend.io/renovate/

mend.io

https://github.com/search?q=user%3Aemmercm+%28path%3A**%2Frenovate.json+OR+path%3A**%2Frenovate.json5%29&type=code&ref=advsearch

github.com

https://emmer.dev/tag/renovate

emmer.dev

https://docs.renovatebot.com/presets-helpers/

docs.renovatebot.com

https://github.com/emmercm/igir/pull/1823

github.com