# GitHub Actions is the weakest link

<https://nesbitt.io/2026/04/28/github-actions-is-the-weakest-link.html>

- Host: [nesbitt.io](https://links.thingelstad.xyz/hosts/nesbitt.io/)
- Saved: April 30, 2026 (2026-05-01T04:01:24Z)
- Record: https://links.thingelstad.xyz/links/0c77c59b60f8/
- JSON: https://links.thingelstad.xyz/links/0c77c59b60f8.json

## What Jamie wrote

Software supply chain issues are growing. It would be a help to the whole industry if Github put some guardrails in GitHub Actions to help people not be so insecure by default.

## Facts

- Kind: [Page](https://links.thingelstad.xyz/kinds/page/)

## Appears in

- [WT346: Weekly Thing 346 / Wuphf, Landsat, Eclipse](https://weekly.thingelstad.com/archive/346/), Briefly

## Saved the same week

- [Mahjong: a Visual Guide](https://links.thingelstad.xyz/links/b5ff2e94eb1d/) (themahjong.guide, April 30, 2026)
- [I Left Port 22 Open on the Internet for 54 Days. Here's Who Showed Up.](https://links.thingelstad.xyz/links/61e837d36edb/) (arman-bd.hashnode.dev, April 30, 2026)
- [Build with Micro.blog](https://links.thingelstad.xyz/links/8fa24c5493da/) (microblog.dev, April 30, 2026)
- [Solar Eclipse Map](https://links.thingelstad.xyz/links/d160236df5b3/) (dojo.amcharts.com, April 30, 2026)
- [Parachute Backup - Backup Utility for iCloud Drive and iCloud Photos](https://links.thingelstad.xyz/links/0fd330f936b0/) (parachuteapps.com, April 30, 2026)

## Elsewhere

- Wayback Machine: https://web.archive.org/web/*/https://nesbitt.io/2026/04/28/github-actions-is-the-weakest-link.html