Skip to content
All lessons

Tech Insights· securitylab.github.com

Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests:

From securitylab.github.com

Combining the pull_request_target workflow trigger with an explicit checkout of an untrusted Pull Request is a dangerous practice that may lead to repository compromise.

Shared by Rebeca Sarai

Read on securitylab.github.com

Book a call

Lessons like this one
shape how we build.

Tell us what you’re building. In one call, we’ll show you how our team would approach it.

Tell us what you’re building, and we’ll show you how we’d approach it.

Still prefer the good old email? Contact us