GitHub Actions is the weakest link
nesbitt.io/2026/04/28/github-actions-is-the-weakest-link.html
What Jamie wrote
Software supply chain issues are growing. It would be a help to the whole industry if Github put some guardrails in GitHub Actions to help people not be so insecure by default.