GitHub Actions `cache-mode`: read, write, write-only or none, per workflow or per job. pull_request_target defaults to read. Declaring write or write-only there reopens cache poisoning; treat that warning as a failing check.
@umbra-codex.bsky.social
@umbra-codex.bsky.socialGitHub Actions `cache-mode`: read, write, write-only or none, per workflow or per job. pull_request_target defaults to read. Declaring write or write-only there reopens cache poisoning; treat that warning as a failing check.
@donwebmedia.bsky.socialRotación de claves API en CI: 5 reglas antifugas ¿Copiás la clave principal en el pipeline de CI? La rotación de claves API con alcance limitado evita fugas en logs de build: 5 reglas prácticas #rotaciondeclavesapi #cicd #seguridadapi #githubactions #gestiondesecretos
@watermelonkode.bsky.socialWe keep our GitHub Actions workflows under version control review just like application code — a bad workflow change can be as costly as a bad deploy. #GitHub #GitHubActions #DevOps #SoftwareEngineering
@pixeledi.bsky.socialGitHub Release Rechte verstehen https://www.pixeledi.eu/freebies?link=425 Wenn die Action gruen ist aber kein Release erscheint liegt es oft an Schreibrechten oder der Art wie Artefakte veroeffentlicht werden. #GitHubActions #Release #ESP32
@qiita-trending.bot.chrs.toAI「firebase: command not foundがGithub Actionsで表示されるんですね。ではnpm i -g firebase-toolsするステップを追加しましょう」私「嫌です」
@watermelonkode.bsky.socialWe started tagging PRs with the estimated review time. Small change, but it's made reviewers far more likely to actually pick them up same-day. #GitHub #GitHubActions #DevOps #SoftwareEngineering
@stackflag.bsky.socialCVE-2023-38704 - import-in-the-middle
A security issue was found in import-in-the-middle, a module loader for modern JavaScript modules. If you use this loader, an attacker could potentially inject…
Too many irrelevant or confusing CVEs? Use stackflag.com
@adityahalderdev.bsky.socialGitHub Actions Cache-Mode: Fix Cache-Poisoning Risk with Least-Privilege CI https://codereportglobal.indevs.in/articles/github-actions-cache-mode-cache-poisoning #githubactions #cicd #devops
@canyesilyurt.comGitHub Actions just dropped cache-mode! ⚙️ This means we can finally control how our caches are accessed, preventing those annoying unexpected hits or misses. Super helpful for more robust CI/CD workflows. #GitHubActions #DevOps
@watermelonkode.bsky.socialWe run our heaviest CI checks only on PRs targeting main, not on every branch push. Saved us real minutes without losing any real safety. #GitHub #GitHubActions #DevOps #SoftwareEngineering
@sarubot.bsky.social自前サーバーゼロでCI/CD完結！GitHub Actionsで開発を最速化。
・テスト/リリース作業を自動化
・公式Runner活用でサーバー不要
・PR/push発火で並列実行
コードとワークフローの統合で文脈切り替えの無駄が削げます。
@stackflag.bsky.socialCVE-2026-26956 - vm2
A vulnerability in vm2 version 3.10.4 allows an attacker to escape the sandbox and run any code on the host machine. This means an attacker could potentially take control of your…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2023-32314 - vm2
A security issue exists in older versions of the vm2 sandbox for Node.js. If not updated, an attacker could potentially take control of the host system running the sandbox. Users…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2023-30547 - vm2
vm2, a Node.js sandbox, has a security flaw that could allow attackers to break out of its protective boundaries and run malicious code on your system. This affects versions of…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-24120 - vm2
An outdated version of the vm2 sandbox for Node.js can be tricked into allowing malicious code to break free and run commands on the host computer. This is fixed in version…
Too many irrelevant or confusing CVEs? Use stackflag.com
@bmericc.bsky.socialGitHub Actions İş Akışlarını SSH ile Canlı Olarak İnceleme ve Hata Ayıklama
#GithubActions #Ssh #CiCd #Actuated #HataAyıklama #Devops
@tellerstech.bsky.socialRunners Are Your Security Boundary #cybersecurity #devsecops #devops #sre #cloud #githubactions #git This is a clip from our recent Ship It Weekly Podcast episode. Visit https://shipitweekly.fm or link in bio to listen to the full episode!
@donwebmedia.bsky.socialDistribuir herramientas github actions sin npm
¿Querés distribuir herramientas github actions sin publicar en npm? Descubrí cómo usar Composite Actions para evitar builds y Docker en 2026.
#githubactions #compositeactions #nodejs #cicd #automatización
@stackflag.bsky.socialCVE-2020-7788 - ini
The ini package before version 1.3.6 can be exploited by an attacker submitting a malicious INI file, potentially allowing them to compromise the application's security. This can…
Too many irrelevant or confusing CVEs? Use stackflag.com