Digest #205: GitHub Actions Exploitation, Terraform Internals, Passkeys Warning and Go Runtime

devopsbulletin.com

A bot exploiting GitHub Actions across Microsoft and CNCF projects, Terraform internals deep-dive, npm token theft via CI, and Go runtime scheduler explained.