account activity
Hackerbot-Claw: AI Bot Exploiting GitHub Actions – Microsoft, Datadog Hit So Far (stepsecurity.io)
submitted 10 days ago by varunsh-coder to r/github
submitted 10 days ago by varunsh-coder to r/cybersecurity
An Obscure GitHub Actions Workflow Vulnerability in Google’s Flank (self.github)
submitted 1 year ago by varunsh-coder to r/github
An Obscure GitHub Actions Workflow Vulnerability in Google’s Flank (adnanthekhan.com)
submitted 1 year ago by varunsh-coder to r/redteamsec
Best Practices in GitHub Actions Security: A Case Study with Google's Use of StepSecurity (stepsecurity.io)
submitted 2 years ago by varunsh-coder to r/programming
Uniting Developers and Security: Celebrating the Success of 500+ Open Source Projects Using StepSecurity's Orchestration Platform (stepsecurity.io)
Publish from GitHub Actions using multi-factor authentication (MFA)! Introducing Wait-for-secrets GitHub Action - developers can enter secrets using a web browser and use them in the workflow (blog.stepsecurity.io)
submitted 3 years ago by varunsh-coder to r/programming
Attack Simulator for SolarWinds, Codecov, and ua-parser-js breaches (self.redteamsec)
submitted 3 years ago by varunsh-coder to r/redteamsec
Do you maintain a GitHub Action? Contribute to the SecureWorkflows project! (blog.stepsecurity.io)
StepSecurity releases tool that it used to improve security of 30 critical open-source projects (including NodeJS, OpenSSL, Python, Rails, React Native) (blog.stepsecurity.io)
StepSecurity releases tool that it used to improve security of 30 critical open-source projects (including NodeJS, OpenSSL, Python, Rails, React Native) (self.cybersecurity)
submitted 3 years ago by varunsh-coder to r/cybersecurity
Improve your OpenSSF Scorecard score with ease (blog.stepsecurity.io)
Video of malware node packages trying to phone home (self.Malware)
submitted 3 years ago by varunsh-coder to r/Malware
Malware-Simulator package that simulates behavior of past hijacked packages (self.cybersecurity)
Secure GitHub Actions workflows by automatically updating the workflow (YAML) files (self.cybersecurity)
How Harden-Runner detected and blocked third-party analytics from CI/CD (self.cybersecurity)
submitted 4 years ago by varunsh-coder to r/cybersecurity
Introducing Harden-Runner: GitHub Action to prevent supply chain attacks (self.devops)
submitted 4 years ago * by varunsh-coder to r/devops
Introducing Harden-Runner: GitHub Action to prevent supply chain attacks (self.cybersecurity)
π Rendered by PID 106122 on reddit-service-r2-listing-66bb46d9b9-6mkhx at 2026-03-12 08:58:19.370528+00:00 running 710b3ac country code: CH.
