julietsecurity

3 ms·

1. 1.▲
   by julietsecurity 7mo ago

   We built this after CVE-2026-33634 (Trivy compromise). Every remediation guide says "grep your workflows for trivy-action" — but if you use a composite action that internally calls trivy-action, grep finds nothing. abom recursivel
2. 2.▲
   Show HN: Abom – Actions Bill of Materials for GitHub Actions Supply Chains(github.com)

   2 points by julietsecurity 7mo ago|1 comments
3. 3.▲
   by julietsecurity 7mo ago

   This is pretty neat. you should add sound effects like this - https://www.youtube.com/watch?v=kPRA0W1kECg