• Home
  • GitHub
  • Training
  • Scrum
Sign in Subscribe
Instagram Twitter phone

Supplychain Security

A collection of 2 posts
Keep the creepy crawlies out of you workflows: securing GitHub Actions in 2026
GitHub Actions Featured

Keep the creepy crawlies out of you workflows: securing GitHub Actions in 2026

GitHub Actions is now one of the most used CI/CD platforms in the world, which also makes it an attractive target for attackers. After several large supply chain attacks, GitHub made many changes and added improvements to how Actions works over the past year.
16 Oct 2026 27 min read
Improved Dependency Submission for GitHub Actions
GitHub Actions

Improved Dependency Submission for GitHub Actions

Recently someone brought to my attention that when pin your actions, Security Advisories for GitHub actions do not show up in the Dependency Graph. I set about a solution to solve that problem.
27 Dec 2025 3 min read
Page 1 of 1
Scrum Bug © 2026
Facebook X LinkedIn GitHub Bluesky Mastodon Instagram Threads StackOverflow MVP Call RSS
Powered by Ghost