Disrupting supply chain attacks on NPM and GitHub Actions

Explore the changes we've shipped across npm and GitHub Actions over the past few months to disrupt supply chain attack techniques and limit their impact.
77 points by nyku 85 days ago github.blog 26 comments

Summary

Recent updates to npm and GitHub Actions aim to combat supply chain attacks by implementing new strategies to mitigate their effects. Learn about the specific changes that enhance security for developers and users alike.

Comments (26 of ) ⌛

Loading more comments... ⌛
Scroll down to load more comments
No comments available.
Type to search HN and engineering blog articles
Press Escape to close  |  ↑↓ to navigate  |  Enter to open