GCP Workload Identity Federation: GitHub Actions and GitLab Setup
A practical guide to replacing GCP service-account keys with Workload Identity Federation across GitHub Actions, GitLab, AWS, and Azure.
16 min read
Topic
GitHub Actions Security
Every article tagged GitHub Actions Security, newest first.
2 articles
Articles tagged GitHub Actions Security
The OWASP Top 10 CI/CD Security Risks: A Practitioner’s Blueprint
Master the OWASP Top 10 CI/CD Security Risks. Concrete attacks, code examples, and battle-tested controls to harden your pipelines against supply chain threats.
8 min readLooking for something specific?
Search every article by topic, tool or CVE.
Keep reading
Latest from the blog
Node.js Brotli RCE (CVE-2026-111497): Patch Guide
Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.
15 min read
PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Critical PHP RCE Patch Guide
PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposes 70% of the web to unauthenticated PHP RCE and memory leaks. Check fixed versions, IOCs, and mitigations.
23 min read
Google Cloud VPC-SC Updates: Folders, PSC Endpoints & Remediation
Google Cloud VPC Service Controls now supports folder-level perimeters, folder and organization rules, PSC endpoints, service patterns, and guided violation remediation. Here are the technical details and YAML configs.
7 min read