#security

Hardening GitHub Actions: Five Changes Worth Making Today

Concrete, copy-pasteable security improvements for CI pipelines: OIDC over long-lived secrets, pinning, least-privilege tokens, and more.