
Resource guideDevelopment
Harden GitHub Actions workflows: a 10-point security checklist
CI workflows hold your deploy keys and tokens. This checklist covers SHA pinning, least-privilege GITHUB_TOKEN, script injection, pull_request_target and OIDC.
By Cloudsoft Zone











