Posts by

Jaroslav Lobacevski

Four tips to keep your GitHub Actions workflows secure

Researchers from Purdue and NCSU have found a large number of command injection vulnerabilities in the workflows of projects on GitHub. Follow these four tips to keep your GitHub Actions workflows secure.

August 9, 2023

Open Source

New tool to secure your GitHub Actions

Introducing a new tool to monitor and control the permissions of the repository token for GitHub Actions.

June 26, 2023

Community

Validate all the things: improve your security with input validation!

If there's one habit that can make software more secure, it's probably input validation. Here's how to apply OWASP Proactive Control C5 (Validate All Inputs) to your code.

March 21, 2022

Jaroslav Lobacevski

Four tips to keep your GitHub Actions workflows secure

New tool to secure your GitHub Actions

Validate all the things: improve your security with input validation!

Subscribe to The GitHub Insider