Hacker News new | past | comments | ask | show | jobs | submit
insanitybit | on: Keyv and friends compromised in active Shai-Hulud supply chain attack
Yes, you should separate "tests execute" into their own unprivileged workflows that don't have "deploy" secrets.
rcxdude | parent
You can also do the same for the build workflow, no?
loading story #49171234