Today is the day! My JSNation talk 'De-bloating the Web: The "Ecosystem Performance" Initiative (e18e)' will be live at 17:30 UTC.
If you want to know what e18e is all about, what we are up to, and how you can help or benefit from it, make sure to join the talk later!
@jsnation.gitnation.org
most of these github actions driven breaches are because of pull_request_target.
here's some tips of what to look for when reviewing your own workflows.
worth noting - it is safe, and necessary, when used correctly
🧵