A simpler method to detect this would be to store GitHub action tag hashes and f... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

shawabawa3 on March 15, 2025 | parent | context | favorite | on: Tj-actions/changed-files GitHub Action Compromised...

A simpler method to detect this would be to store GitHub action tag hashes and freeze an action if any tag is changed

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact