Submissions from stepsecurity.io

		Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos (stepsecurity.io)
		273 points by varunsharma07 40 days ago \| past \| 298 comments
		CI/CD supply chain attack on Azure Karpenter Provider open-source project (stepsecurity.io)
		3 points by varunsharma07 4 months ago \| past \| 2 comments
		Security Breach in Stripe Repo: A Deep Dive into the "Pwn Request" Vulnerability (stepsecurity.io)
		7 points by varunsharma07 7 months ago \| past
		Show HN: GitHub Actions Advisor – View security scores of GitHub Actions you use (stepsecurity.io)
		3 points by varunsharma07 on Jan 17, 2024 \| past
		GitHub Actions security best practices (Checklist) (stepsecurity.io)
		4 points by jayaramsinghani on Dec 14, 2023 \| past
		How Google secures their GitHub Actions workflows with StepSecurity (stepsecurity.io)
		3 points by varunsharma07 on Nov 8, 2023 \| past
		Celebrating Success of 500 Open Source Projects Using StepSecurity's Platform (stepsecurity.io)
		1 point by varunsharma07 on July 11, 2023 \| past \| 1 comment
		Do you maintain a GitHub Action? Contribute to the SecureWorkflows project (stepsecurity.io)
		2 points by varunsharma07 on Aug 31, 2022 \| past \| 1 comment