“Disrupting supply chain attacks: A threat framework for GitHub Actions” — Steve Glass and @gregose share an in-depth look at supply chain attacks across the Actions ecosystem and what we shipped to disrupt them. If you maintain open source or CI/CD pipelines, this is one to add to your agenda.
