Loading
Topic
workflow security
9 posts about workflow security by 7 contributors.
Know workflow security? Share what you know with developers who are learning it.
+ Follow workflow securityBe the first to follow this
- Articles
- 9
- Contributors
- 7
Everything about workflow security
- Article · DevOps
GitHub Actions Workflow Lockfiles: How to Pin Actions to Reviewed Commits
Learn how to pin GitHub Actions to reviewed commit SHAs, replace movable tags, and maintain a safer workflow update and review process.
- Article · Power Automate
How to Hide Sensitive Data in Power Automate Run History Using Secure Inputs and Outputs
Introduction Microsoft Power Automate provides run history to help developers monitor workflow execution, troubleshoot errors, and validate the data passed between actions. However, this run history can also expose sensitive information, such as customer email addresses, confidential business detail
- Article · Cyber Security
How to Use Smaller Token Scopes for Dependabot Alerts in GitHub Actions
Learn how to reduce GitHub Actions token permissions for Dependabot workflows using least privilege, job-level scopes, security boundaries, and troubleshooting.
- Article · DevOps
GitHub Actions cache-mode: Preventing Cache Poisoning with Least-Privilege Workflows
Learn how GitHub Actions cache-mode controls cache access and how least-privilege workflow permissions can reduce cache poisoning and supply-chain risks.
- Article · Cyber Security
GitHub Actions Cache Security: When Should a Workflow Use Read, Write, or No Cache Access?
Learn how to choose read, write, or no-cache access in GitHub Actions workflows and reduce security risks from untrusted builds and cache poisoning.
- Article · Cyber Security
CodeQL 2.26.3: Testing GitHub Actions Workflow Security Detection
Explore CodeQL 2.26.3 security detection for GitHub Actions workflows and learn how to test CI/CD pipelines for workflow-related security vulnerabilities.
- Article · Cyber Security
CodeQL 2.26.3: Testing GitHub Actions Security Detection in CI/CD
Learn how to test CodeQL 2.26.3 security detection for GitHub Actions workflows and improve vulnerability detection in CI/CD pipelines.
- Article · Security
How to Prevent Secrets Exposure in GitHub Actions Workflows
Secure your GitHub Actions! Learn how to prevent secrets exposure by avoiding hardcoded values, limiting access, and using short-lived credentials. Build safer CI/CD pipelines.
- Article · n8n
Encrypting Sensitive Data in n8n Workflows
Secure your n8n workflows! This guide details how to encrypt sensitive data like API keys, passwords, and tokens within n8n. Learn to protect your automation from leaks and unauthorized access using credentials, environment variables, and node-level encryption. Ensure compliance, reliability, and trust by implementing robust security measures. Protect your data and maintain workflow integrity with our comprehensive encryption strategies for n8n.
