Remove pushing-a-project-to-github
article thumbnail

ArtiPACKED: Hacking Giants Through a Race Condition in Github Actions Artifacts

Prisma Clud

Executive Summary This research examines an attack vector allowing the compromise of GitHub repositories, leading to severe consequences and potential high-level access to cloud environments. The vulnerability arises from the abuse of GitHub Actions artifacts in CI/CD workflows.

article thumbnail

Deploy an Astro Site to GitHub Pages using GitHub Actions

Xebia

This blog is build with Astro and deployed to GitHub Pages using GitHub Actions. Prepare Project A working Astro site in a repository on GitHub is needed for the subsequent steps. Prepare Project A working Astro site in a repository on GitHub is needed for the subsequent steps.

IPv6 130
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

CI/CD in dbt Cloud with GitHub Actions: Automating multiple environments deployment

Xebia

In my previous blog post, I discussed how to manage multiple BigQuery projects with one dbt Cloud project , but left the setup of the deployment pipeline for a later moment. You may be wondering why we follow this CI/CD build process, instead of building the whole project. to the “ Build preprod ”.

Cloud 130
article thumbnail

Creating an Angular Jamstack Blog

Netlify

A blog is a great place to share the inside scoop on your new features with your users or bring new eyes to your site with interesting content. Scully , the Angular Static Site Generator, makes it easier to create a blog using Markdown and the Angular framework we’re familiar with. generate a blog skeleton. this commit.

article thumbnail

Deploy a Strapi and React Blog on Netlify

Netlify

Have you ever wondered how a React blog could work while consuming a Strapi API? In this tutorial, you’ll learn how to deploy a React blog on Netlify that fetches content from a Strapi instance, which will be deployed on Heroku , which is a cloud platform where you can host a Strapi server for free. uploaded blog post images).

article thumbnail

The GitHub Actions Worm: Compromising GitHub Repositories Through the Actions Dependency Tree

Prisma Clud

Learn how a novel attack vector in GitHub Actions allows attackers to distribute malware across repositories using a technique that exploits the actions dependency tree and puts countless open-source projects and internal repositories at risk.

Malware 144
article thumbnail

Unpinnable Actions: How Malicious Code Can Sneak into Your GitHub Actions Workflows

Prisma Clud

In today’s post, we look at action pinning, one of the profound mitigations against supply chain attacks in the GitHub Actions ecosystem. It turns out, though, that action pinning comes with a downside — a pitfall we call "unpinnable actions" that allows attackers to execute code in GitHub Actions workflows.