Hackernews posts about GitHub Actions

1. Trivy under attack again: Widespread GitHub Actions tag compromise secrets (socket.dev)
   250 points by jicea 16 days ago | 83 comments
2. An experiment to use GitHub Actions as a control plane for a PaaS (towlion.github.io)
   22 points by baijum 22 days ago | 13 comments
3. Show HN: CargoWall – eBPF Firewall for GitHub Actions (github.com)
   14 points by caleblloyd 7 days ago | 2 comments
4. Show HN: PipeStep – Step-through debugger for GitHub Actions workflows (github.com)
   12 points by photobombastic 26 days ago | 9 comments
5. Widespread Trivvy GitHub Actions Tag Compromise Exposes CI/CD Secrets (socket.dev)
   7 points by donutshop 18 days ago | 1 comments
6. Anti-Slop: A GitHub action that detects and automatically closes AI slop PRs (github.com)
   7 points by flykespice 23 days ago | discuss
7. A local GitHub Actions runner built with MoonBit (github.com)
   6 points by hongbo_zhang 23 days ago | 2 comments
8. Why glibc is faster on some GitHub Actions Runners (codspeed.io)
   6 points by art049 29 days ago | discuss
9. Show HN: Orcastrate – Sync GitHub Actions workflows across repos via templates (github.com)
   5 points by michidk 1 day ago | discuss
10. Show HN: Agent-CI (Run GitHub Actions on your local machine.) (agent-ci.dev)
    4 points by pistoriusp 11 days ago | 3 comments
11. GitHub Actions for Gradle v6: What's Changing and Why (blog.gradle.org)
    4 points by arkon_hn 9 days ago | discuss
12. Show HN: GitGlimpse – GitHub Action that generates UI/UX demos for your PRs (github.com)
    4 points by fatach 20 days ago | discuss
13. Decision Guardian: My First GitHub Action and CLI Project (github.com)
    4 points by poor_hustler 27 days ago | discuss
14. Show HN: GitHub Actions for Agents
    3 points by pistoriusp 13 days ago | 2 comments
15. Trivy Under Attack Again: Widespread GitHub Actions Tag Compromise Exposes (socket.dev)
    3 points by tamnd 17 days ago | 1 comments
16. Self-hosting our GitHub Action runners (www.jmduke.com)
    3 points by speckx 19 days ago | 1 comments
17. CVE-2026-31900, my 0-click RCE in the psf/black GitHub Action (medium.com)
    3 points by ParzivalHack 20 days ago | 1 comments
18. Show HN: I built a Cargo supply chain auditor using Claude and GitHub Actions (github.com)
    3 points by T-RN-R 5 days ago | discuss
19. What's coming to our GitHub Actions 2026 security roadmap (github.blog)
    3 points by abraham 12 days ago | discuss
20. A multi-week, multi-ecosystem attack chain spanning GitHub Actions, npm, PyPI (ramimac.me)
    3 points by dsr12 13 days ago | discuss
21. KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attack (www.wiz.io)
    3 points by blazarquasar 15 days ago | discuss
22. What the Fork? Imposter Commits in GitHub Actions and CI/CD (www.chainguard.dev)
    3 points by donutshop 17 days ago | discuss
23. Automated Deployments with GitHub Actions for Amazon ECS Express Mode (aws.amazon.com)
    3 points by mariuz 21 days ago | discuss
24. AI-Powered Bot Compromises GitHub Actions Workflows (www.infoq.com)
    3 points by geoffbp 26 days ago | discuss
25. Most GitHub Actions OIDC trust policies allow any repo to assume AWS IAM roles (haitmg.pl)
    2 points by gebalamariusz 21 days ago | 2 comments
26. Anyone else having GitHub Actions fail?
    2 points by munksbeer 26 days ago | 2 comments
27. Show HN: Abom – Actions Bill of Materials for GitHub Actions Supply Chains (github.com)
    2 points by julietsecurity 12 days ago | 1 comments
28. What's coming to our GitHub Actions 2026 security roadmap (github.blog)
    2 points by shscs911 9 days ago | discuss
29. AI DevOps Actions: 9 GitHub Actions for CI/CD in AI-Native Repos (github.com)
    2 points by trivexiai 15 days ago | discuss
30. Workflow Guardian – a GitHub Action that lints your CI/CD workflow files (github.com)
    2 points by hnollie89 19 days ago | discuss