Ars Technica

Auth error trying to copy a repo with Github Actions

So, thanks to a helpful Github employee on StackOverflow, I learned that GHA has a couple of helpful "features" that were tripping me up: - The 'checkout@v2' action by default only does a minimal ...
VentureBeat

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and ...
Bleeping Computer

GitHub restores popular Python repo hit by bogus DMCA takedown

Yesterday, following a DMCA complaint from HackerRank, GitHub took down a repository that hosts the official SymPy project documentation website. First released fifteen years ago, SymPy is an open ...

GitHub Automatically Holds Suspicious Actions Runs, but Repository Owners Must Approve Them

GitHub now automatically holds suspicious Actions workflows in public repositories, but maintainers must still review approvals, permissions, and risks.
InfoQ

Lessons Learned from Enterprise Usage of GitHub Actions

A major key to success in using GitHub Actions is to embrace GitHub's repository-centric mindset Shifting the focus from the pipeline to the pull request as the main aggregator of quality gates is ...