Disrupting supply chain attacks on NPM and GitHub Actions

(github.blog)

28 points | by nyku 2 hours ago

1 comments

  • DiabloD3 1 hour ago
    [flagged]
    • theF00l 43 minutes ago
      The job can require you to
      • DiabloD3 34 minutes ago
        [flagged]
        • UqWBcuFx6NV4r 7 minutes ago
          These comments should be removed r from HN, because they in no way actually add to the conversation. They aren’t intelligent, they aren’t insightful, they aren’t actionable, and they don’t invite a genuine reply. All you’re saying is that you happen to not use these technologies yourself – something that I’m sure is only by happenstance – and that you feel superior for it.

          This is a blog post by GitHub. what are you suggesting that these employees do? Simply ignore that they exist? Regardless of whether or not you use them, they still exist.

        • x86a 28 minutes ago
          This is such a myopic take
        • baby_souffle 21 minutes ago
          GitHub actions doesn’t really make you a js shop
    • rho138 1 hour ago
      > Opting out of toxic ecosystems is a valid option

      Quick, everyone break out the pitchforks for a valid analysis of a game! /s