I agree, but GitHub *must* fix the security nightmare that is waiting to happen ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		hn_throwaway_99 on April 15, 2020 \| parent \| context \| favorite \| on: GitHub is now free for teams I agree, but GitHub must fix the security nightmare that is waiting to happen with GitHub actions marketplace. Seems like this would be such an easy fix, too.

pknopf on April 15, 2020 [–]

Organizations can enforce that their repos use only actions that are within the repo, making the build more secure, controlled and auditable.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact