41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a08c63-9743-708c-a4c8-20eed5960a8a

GitHub Actions supply chain attacks

wolfe.id.au · published 26 April 2021

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at wolfe.id.au Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 10
Words captured: 781

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/features/actions

github.com

https://about.codecov.io/security-update/

about.codecov.io

https://krebsonsecurity.com/tag/solarwinds-breach/

krebsonsecurity.com

https://hub.docker.com

hub.docker.com

https://www.npmjs.com/

npmjs.com

https://github.com/search?l=&q=codecov-action+language%3AYAML&type=code

github.com

https://docs.github.com/en/actions/learn-github-actions/security-hardening-for-github-actions

docs.github.com

https://github.blog/2021-04-13-implementing-least-privilege-for-secrets-in-github-actions/

github.blog

https://securitylab.github.com/research/github-actions-untrusted-input/

securitylab.github.com

https://blog.rsisecurity.com/how-to-perform-a-security-incident-response-tabletop-exercise/

blog.rsisecurity.com