1
Use GitHub actions at your own risk
Malicious code can be inserted into any GitHub action, even those which are tagged.
Julien Renaux, AI-augmented software engineer with 15 years building scalable web apps across four continents. Ex-eBay and Rakuten, now freelancing via Toptal.
Visit julienrenaux.fr → On Hacker News Dec 2019 – Dec 2019
Malicious code can be inserted into any GitHub action, even those which are tagged.