Latest GitHub outage squeezes Actions, Pages to death

GitHub’s automation platform Actions and its hosting service Pages are failing, according to an incident page on the ...

GitHub Automatically Holds Suspicious Actions Runs, but Repository Owners Must Approve Them

GitHub now automatically holds suspicious Actions workflows in public repositories, but maintainers must still review ...
Bleeping Computer

GitHub Actions artifacts found leaking auth tokens in popular projects

Multiple high-profile open-source projects, including those from Google, Microsoft, AWS, and Red Hat, were found to leak GitHub authentication tokens through GitHub Actions artifacts in CI/CD ...
Tech Times on MSN

Docker Hub OIDC closes last long-lived credential gap in GitHub Actions

Docker Hub OIDC connections for GitHub Actions replace stored personal access tokens with per-run credentials that expire ...
Tech Times on MSN

GitHub supply chain defense map: Nine controls shipped, network firewall still in preview

GitHub's supply chain defense map catalogs nine shipped controls across npm and GitHub Actions — covering pwn-request ...
GIGAZINE

GitHub Actions announces pricing plan changes, but developers are outraged by the price hike and the changes are postponed

GitHub Actions, which allows you to automatically execute workflows triggered by GitHub events, on December 16, 2025. The core of this announcement is that the price of GitHub-hosted runners will be ...
Bleeping Computer

GitHub Action hack likely led to another in cascading supply chain attack

The tj-actions developers cannot pinpoint exactly how the attackers compromised a GitHub personal access token (PAT) used by a bot to perform malicious code changes. Today, Wiz researchers think they ...