Stories by varunsharma07

Grafana GitHub Actions Security Incident

Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos

CI/CD supply chain attack on Azure Karpenter Provider open-source project

Security Breach in Stripe Repo: A Deep Dive into the "Pwn Request" Vulnerability

An Obscure Actions Workflow Vulnerability in Google's Flank

Show HN: GitHub Actions Advisor – View security scores of GitHub Actions you use

How Google secures their GitHub Actions workflows with StepSecurity

Protect Against CI/CD Attacks That Poison GitHub Actions Workflows

Celebrating Success of 500 Open Source Projects Using StepSecurity's Platform

Show HN: AI-CodeWise – Transforming Code Reviews with AI-Powered Analysis

Show HN: Secure your public GitHub repository with automated security fixes

In Scorecard We Trust

DevOps Self-Service Centric Pipeline Security and Guardrails

Show HN: Protect Your CI/CD from SolarWinds-Type Attacks with This Agent

The Audit of Git Is Complete

Update on Security Improvement at the Eclipse Foundation

Implementing OSSF Scorecards Across a GitHub Organisation

Peribolos: Kubernetes Uses GitOps to Manage GitHub Communities at Scale

Layoff information on Washington State employers

Open Source Security Foundation (OpenSSF) 2022 Annual Report [pdf]