Tag Archive
Archive for this tag.
Post · February 25, 2026
The `pull_request_target` trigger in GitHub Actions is a major security risk if misused. Understand why it's dangerous and how it exposes repository secrets.
Read →Post · February 09, 2026
Secure your GitHub Actions. Learn 3 essential mitigation techniques: checking PR origins, using manual approval labels, and gating jobs with environments.
Read →Post · January 24, 2026
Audit your GitHub workflows for a critical security flaw. This guide helps you identify if your use of `pull_request_target` is checking out untrusted code.
Read →Post · January 08, 2026
Explore the `pull_request_target` vulnerability found by Orca Security. See how Fortune-100 companies were exposed to RCE from a single malicious pull request.
Read →Post · December 23, 2025
Learn the security-critical distinction between `pull_request` and `pull_request_target` in GitHub Actions. One is safe for forks, the other could expose your secrets and code.
Read →Post · March 19, 2025
Learn how to automate static asset processing and deployment inside your CI/CD pipeline, with examples for GitHub Actions and Webpack.
Read →Post · September 15, 2023
Looking to deploy your Vite React app with React Router to GitHub Pages? This step-by-step guide will walk you through the process, covering everything from GitHub Actions to common pitfalls.
Read →Post · January 10, 2022
GitHub Pages is a great way to host static websites and web apps, and the gh-pages npm package makes it easy to deploy your site from a GitHub Actions workflow. However, sometimes you may encounter an error that says 'Invalid username or password' when trying to commit with gh-pages. In this blog post, we'll guide you through troubleshooting and fixing this issue. We'll cover steps to check your authentication details, ensure your access token is stored as a secret, and update your workflow to use the secret. By following these steps, you'll be able to authenticate with GitHub and deploy your site to GitHub Pages with confidence.
Read →Post · August 6, 2021
Dive into the power of GitHub Actions for automating your software development lifecycle. Explore features, best practices, and code examples to get the most out of this robust platform.
Read →