A supply chain attack involving malicious GitHub Action workflows has impacted hundreds of repositories and thousands of ...

Threat actors had access to Salesloft’s GitHub account between March and June 2025 and performed reconnaissance.

Attackers abused GitHub Actions workflows to siphon off thousands of credentials from hundreds of npm and PyPI repositories.

In addition to SAST integration, JFrog’s Runtime Security now offers real-time monitoring within GitHub Actions that focuses on the security of applications in production environments.

Multiple high-profile open-source projects, including those from Google, Microsoft, AWS, and Red Hat, were found to leak GitHub authentication tokens through GitHub Actions artifacts in CI/CD ...

GitHub has a unique security feature - it scans the code for exposed Amazon Web Services (AWS) keys (among other things) and if it finds them, it reports them to AWS which can act to prevent ...

Recognizing the platform's extensive adoption, StepSecurity has focused on fortifying security for users of GitHub Actions while also planning to expand its security platform to more CI/CD providers.

Software Development NewsSD Times news digest: VMware’s acquisition of Pivotal, GitHub Enterprise on AWS Marketplace, and security patches for Git vulnerabilities ...

GitLab Inc. (NASDAQ: GTLB) is one of the largest DevSecOps platform providers. It combines software development, security, and deployment in a single cloud-based solution. Its platform helps ...