Record · corpus.blog/posts/01a087be-5729-7300-8682-11676b2295e8

Finding Unpinned and Unpinnable GitHub Actions

pavel.gr · published 19 May 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at pavel.gr Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 19
Words captured: 1,237

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised

stepsecurity.io

https://www.stepsecurity.io/blog/trivy-compromised-a-second-time---malicious-v0-69-4-release

stepsecurity.io

https://www.stepsecurity.io/blog/actions-cool-issues-helper-github-action-compromised-all-tags-point-to-imposter-commit-that-exfiltrates-ci-cd-credentials

stepsecurity.io

https://github.com/sadreck/butler

github.com

https://github.com/zizmorcore/zizmor

github.com

https://github.com/aws

github.com

https://github.com/aws/aws-encryption-sdk-c/blob/b29a222841794772d513794bb1bca9f3a929b7cf/.github/workflows/clang-format.yml

github.com

https://github.com/DoozyX/clang-format-lint-action/blob/c71d0bf4e21876ebec3e5647491186f8797fde31/action.yml

github.com

https://github.com/aws/s2n-netbench/blob/7e02a6adebb5fab3c37931fa48344347b9091ee7/.github/workflows/ci.yml

github.com

https://github.com/EmbarkStudios/cargo-deny-action/blob/ef301417264190a1eb9f26fcf171642070085c5b/action.yml

github.com

https://github.com/aws/amazon-q-developer-cli/blob/15cc8f3cd18c4272925ce1c7053268eedff1ea0a/.github/workflows/rust.yml

github.com

https://github.com/EmbarkStudios/cargo-deny-action/blob/08f29ebbc9295095546acaf37220058f628a4720/action.yml

github.com

https://github.com/aws/s2n-quic/blob/172d7e5d902f525c6a565644b8f57fb341d39dd9/.github/workflows/dependencies.yml

github.com

https://github.com/aws/amazon-inspector-container-image-scanner-jenkins-plugin/blob/4e69c640ac2dd28c795790fc229967ef69a98e8e/.github/workflows/jenkins-maven-cd.yaml

github.com

https://github.com/jenkins-infra/github-reusable-workflows/blob/791f6a10b7e9084eb9d6742293df4a562a801a8d/.github/workflows/maven-cd.yml

github.com

https://github.com/jenkins-infra/interesting-category-action/blob/78f4b74509528c18790d9c36b2cccb5b21ed3451/action.yaml

github.com

https://github.com/aws/aws-advanced-jdbc-wrapper/blob/6e23a834840ec0b40d6decff6a9bf564d6ed19fc/.github/workflows/release_draft.yml

github.com

https://github.com/slsa-framework/slsa-github-generator/blob/f7dd8c54c2067bafc12ca7a55595d5ee9b75204a/.github/workflows/generator_generic_slsa3.yml

github.com

https://github.com/slsa-framework/slsa-github-generator/blob/f7dd8c54c2067bafc12ca7a55595d5ee9b75204a/.github/actions/detect-workflow-js/action.yml

github.com