Protect Your GitHub Actions with Semgrep
❗ semgrep --config p/github-actions ❗ Demo repository for this post: https://github.com/minusworld-gha-demo/shell-injection.
London calling: Highlights from the 2025 cloud & cyber security expoSemgrep
Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep
Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep
Benchmarking Semgrep Community Edition Performance ImprovementsSemgrep
Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep
From Gatekeepers to Guardrails: Automating Your PCI DSS v4.0.1 StrategySemgrep
Looping by Zapier: Repeat actions for itemsZapier
Integrate Jupyter Notebooks with GitHubThenewstack
Pulumi Neo Now Supports AGENTS.mdPulumi
How AI Assistants Can Decode GitHub Repos for UI WritersDocker
Build Your Own PluginVercel
GitHub - MintlifyMintlify
Introducing Dependency Divergence GitHub ActionSocket
Policy as Code for Any Cloud ProviderPulumi
Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation CampaignSocket
How to Protect Your Projects from the Risks of Deprecated npm PackagesSocket
PolinRider Spreads Through Compromised GitHub Accounts and PackagistSocket
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-HuludSocket
Supply Chain Attack on Axios Pulls Malicious Dependency from npmSocket
How to Use OpenPubkey with GitHub Actions WorkloadsDocker
