A recent attack shone a light on some of the problems with GitHub Actions, and CI/CD more generally. As tempting as it might be, going back to shell scripts probably isn’t the answer.

1K+ cloud environments infected following Trivy supply chain attack

2.5 Admins 292: Trivyally Infected

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

Subscribe to the RSS feed.