#githubactions

GitHub Actions became an attacker’s disposable scanner fleet. https://www.developer-tech.com/news/github-actions-abuse-packagist-repositories-into-scanners/ #devsecops #githubactions #packagist #cybersecurity #developers #infosec #technology

CI/CD pipelines are a prime target for supply chain attacks. We hardened the GitHub Actions workflows for Composer, Packagist and Private Packagist with zizmor, a static analysis tool for GitHub Actions. 🌈 Our new blog post covers what zizmor catches, our configuration, and the pitfalls we hit along the way: https://blog.packagist.com/securing-our-github-actions-workflows-with-zizmor/ #php #phpc #composerphp #github #githubactions #supplychainsecurity

🏃 jonico/awesome-runners A curated list of awesome self-hosted GitHub Action runners in a large comparison matrix Compares self-hosted GitHub Action runner solutions in a detailed matrix with features like scaling, architecture, and costs ⭐ Stars: 882 📅 Last Update: Jul 10, 2026 https://github.com/jonico/awesome-runners #selfhosted #homelab #selfhost #selfhosting #opensource #githubactions