10 posts about GitHub Actions security by 6 contributors.
Know GitHub Actions security? Share what you know with developers who are learning it.
Learn how to route Dependabot pull request workflows to dedicated GitHub Actions runners and design isolated, least-privilege self-hosted runner environments.
Learn how to use stage-only npm tokens in GitHub Actions securely. Protect credentials, configure publishing, and reduce CI/CD risks. Start today.
Learn how to test GitHub Actions workflow execution rules with Evaluate mode, policy insights, actor and event controls, workflow targeting, and safe enforcement.
Learn how GitHub Actions workflow protection controls actors and events, secures sensitive workflows, uses evaluate mode, and strengthens CI/CD security.
Learn how GitHub Actions cache-mode controls cache access and how least-privilege workflow permissions can reduce cache poisoning and supply-chain risks.
Learn how to use CodeQL with GitHub Actions to detect workflow injection vulnerabilities, unsafe expressions, untrusted inputs, and CI/CD security risks before production.
Explore CodeQL 2.26.3 security detection for GitHub Actions workflows and learn how to test CI/CD pipelines for workflow-related security vulnerabilities.
Learn how to test CodeQL 2.26.3 security detection for GitHub Actions workflows and improve vulnerability detection in CI/CD pipelines.
Learn how to use CodeQL to test GitHub Actions workflows for injection vulnerabilities and strengthen CI/CD security against malicious workflow inputs.
Secure your GitHub Actions! Learn how to prevent secrets exposure by avoiding hardcoded values, limiting access, and using short-lived credentials. Build safer CI/CD pipelines.
DevSocialUpcoming · 3rd editionAI Agents ConferenceNov 23–27, 2026Live onlineMembers only16days leftRegisterPublish an article in this category and earn +1,000 SHARP when it is approved.
Write an article