4 ms·
One of my bugbears with Actions is the Marketplace and its low barrier to entry. I fear it’s only a matter of time a popular action is maliciously compromised.
by leftshift 6y ago
One of my bugbears with Actions is the Marketplace and its low barrier to entry.
I fear it’s only a matter of time a popular action is maliciously compromised.
You can protect yourself somewhat [1], but still, it’s going to be a surprise to some when it does happen.
1: https://docs.github.com/en/actions/learn-github-actions/security-hardening-for-github-actions https://docs.github.com/en/actions/learn-github-actions/secu...