//
sign in
Post
by @danabra.mov
PostEmbed
by @danabra.mov
Record
by @jimpick.com
Record
by @atsui.org
+ new component
Post
Fresh from @github.com: "Starting today, actions/checkout@v7 is GA and refuses common pwn requests" The pull_request_target is one of the most commonly misused triggers in GitHub Actions, leading to vulnerabilities in workflows. It runs with the base token and secrets!⚠️ github.blog/changelog/20...
4d
The pull_request_target event is one of the most commonly misused triggers in GitHub Actions, leading to vulnerabilities in workflows. Workflows triggered by pull_request_target run with the base repo...
github.blog
Safer pull_request_target defaults for GitHub Actions checkout - GitHub Changelog
Marko Bevc