3 ms·Merge requests and insecure GitHub workflows may lead to supply-chain attacks2 points by LinuxBender 4y ago