
How to Secure Your GitHub Actions Workflows With CodeQL
In the last few months, we secured more than 75 GitHub Actions workflows in open source projects, disclosing more than 90 different vulnerabilities. Out of this research, we produced new support...