#open-source-contribution-controls

[ follow ]
#github-actions #cicd-security #supply-chain-security #pnpm-dependency-security
Information security
fromtheregister
8 hours ago

TanStack weighs invitation-only pull requests after supply chain attack

A GitHub Actions misconfiguration enabled a worm to poison shared cache and extract secrets, prompting TanStack to tighten CI and consider invitation-only PRs.
[ Load more ]