supply-chain-security
Mini Shai-Hulud Returns: Poisoned GitHub Actions Re-Enabled
actions-cool/issues-helper and maintain-one-comment were re-enabled Sept 16 with malicious tags intact, re-exposing ~15K repos. Learn SHA-pinning fix.
sha pinning
actions-cool/issues-helper and maintain-one-comment were re-enabled Sept 16 with malicious tags intact, re-exposing ~15K repos. Learn SHA-pinning fix.