A Retrospective Survey of 2024/2025 Open Source Supply Chain Compromises
words.filippo.ioProject compromises have common root causes we can mitigate: phishing, control handoff, and unsafe GitHub Actions triggers.
Simple CI/CD with bare git repositories
Continuous deployment with Git hooks is fast and easy to debug!
GitHub - geomys/sandboxed-step: A GitHub Action that runs a command in a gVisor sandbox
A GitHub Action that runs a command in a gVisor sandbox - geomys/sandboxed-step