Speedrunning SHA pinning for GitHub Actions org-wide
How we pinned every GitHub Action across an org after the tj-actions/changed-files compromise, plus what to avoid.
London calling: Highlights from the 2025 cloud & cyber security expoSemgrep
Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep
Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep
Benchmarking Semgrep Community Edition Performance ImprovementsSemgrep
Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep
From Gatekeepers to Guardrails: Automating Your PCI DSS v4.0.1 StrategySemgrep
Looping by Zapier: Repeat actions for itemsZapier
Integrate Jupyter Notebooks with GitHubThenewstack
Pulumi Neo Now Supports AGENTS.mdPulumi
The failed promise of Web ComponentsCss Tricks
New Collaboration Features: Org-level sharing and Auto-JoinMotherduck
How AI Assistants Can Decode GitHub Repos for UI WritersDocker
Build Your Own PluginVercel
GitHub - MintlifyMintlify
Introducing Dependency Divergence GitHub ActionSocket
Introducing the Go Playground - The Go Programming LanguageGo
Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation CampaignSocket
PolinRider Spreads Through Compromised GitHub Accounts and PackagistSocket
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-HuludSocket
Supply Chain Attack on Axios Pulls Malicious Dependency from npmSocket
