Andrew Nesbitt personal blog

GitHub Actions is the weakest link

nesbitt.io published 2026-04-2810 min read

Anne Robinson would like a word with .github/workflows

Points

252

HN comments

93

Submissions

1

Cited by

0 commenters

Infrastructure & DevOpsSecurity & Privacy2026

Related posts from the same era

Axios compromised on NPM – Malicious versions drop remote access trojan

StepSecurity Blog20261,934 points807 comments details

WTF Ubuntu?

Chalmovský20261,625 points683 comments details

Decisions that eroded trust in Azure – by a former Azure Core engineer

Axel’s Substack20261,297 points648 commentscited by 20 details

Don't rent the cloud, own instead

comma.ai Blog20261,222 points497 comments details

Migrating from AWS to Hetzner

Digital Society Blog20251,140 points627 comments details

Backblaze has stopped backing up OneDrive and Dropbox folders and maybe others

Robert Reese's Website20261,130 points693 comments details