GitHub package firewall

An increasing number of malware attacks exploit systems at package installation time, harvesting credentials on CI/CD hosts or developer workstations without even running the package's code. To stem this tide…
7 points by soheilpro 23 hours ago github.blog 0 comments

Summary

GitHub is implementing a package firewall to combat malware attacks that target systems during package installation, potentially compromising credentials without executing any code. This new feature aims to enhance security for developers and CI/CD environments.

Comments (0 of ) ⌛

Loading more comments... ⌛
Scroll down to load more comments
No comments available.
Type to search HN and engineering blog articles
Press Escape to close  |  ↑↓ to navigate  |  Enter to open