devsecops

I Audited Our GitHub Actions and Now I Can't Sleep

A look at the supply chain risks hiding in your CI/CD pipelines. Spoiler: it's worse than you think.