-
The update looked clean later: why software supply-chain reviews need a timeline
Understand short-lived software update tampering and build a useful evidence timeline, with a fictional scenario and questions to ask suppliers.
-
A “security audit” workflow can be the attack: how to review GitHub Actions
Review automation by its trigger, code, permissions and destinations. A practical GitHub Actions exercise informed by October 2026 GhostAction reporting.
