GitHub will block pull_request_target by default in public repositories on December 2. Check affected workflows before the November brownouts.
Tag Archives: CI/CD Security
GitHub Actions Lockfiles: Pin CI Dependencies Without Long SHAs
GitHub Actions lockfiles are generally available. Here’s how to pin action dependencies, verify the lockfile, and avoid important security gaps.