[PR #20] Add GitHub Actions hardening article (Trivy supply chain attack) #26

New Issue

GiteaMirror · 2026-04-17T02:51:43-05:00

GiteaMirror commented

2026-04-17 02:51:43 -05:00

📋 Pull Request Information

Original PR: https://github.com/myugan/awesome-cicd-security/pull/20
Author: @gebalamariusz
Created: 4/15/2026
Status: 🔄 Open

Base: main ← Head: add-github-actions-trivy-article

📝 Commits (1)

bbc26e5 Add GitHub Actions security hardening article

📊 Changes

1 file changed (+160 additions, -159 deletions)

View changed files

📝 README.md (+160 -159)

📄 Description

Adds a blog post to the GitHub Actions section under Blogs:

12 Steps to Secure GitHub Actions After the Trivy Attack - 12-step hardening checklist with YAML and Terraform code, covering the full SpotBugs-to-Trivy attack chain timeline

The article covers practical defensive steps for the March 2025 SpotBugs → Reviewdog → tj-actions → Trivy supply chain compromise, with ready-to-use YAML and Terraform snippets.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/myugan/awesome-cicd-security/pull/20 **Author:** [@gebalamariusz](https://github.com/gebalamariusz) **Created:** 4/15/2026 **Status:** 🔄 Open **Base:** `main` ← **Head:** `add-github-actions-trivy-article` --- ### 📝 Commits (1) - [`bbc26e5`](https://github.com/myugan/awesome-cicd-security/commit/bbc26e52c492a047767f67b183a806afe8beefc0) Add GitHub Actions security hardening article ### 📊 Changes **1 file changed** (+160 additions, -159 deletions) <details> <summary>View changed files</summary> 📝 `README.md` (+160 -159) </details> ### 📄 Description Adds a blog post to the **GitHub Actions** section under Blogs: - [12 Steps to Secure GitHub Actions After the Trivy Attack](https://haitmg.pl/blog/github-actions-security-after-trivy-attack/) - 12-step hardening checklist with YAML and Terraform code, covering the full SpotBugs-to-Trivy attack chain timeline The article covers practical defensive steps for the March 2025 SpotBugs → Reviewdog → tj-actions → Trivy supply chain compromise, with ready-to-use YAML and Terraform snippets. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

GiteaMirror added the pull-request label 2026-04-17 02:51:43 -05:00

GiteaMirror referenced this issue

2026-05-27 15:44:31 -05:00

[PR #26] [CLOSED] Add gha-shield to Tools #32

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/awesome-cicd-security#26