Remove tag immutability
article thumbnail

Unpinnable Actions: How Malicious Code Can Sneak into Your GitHub Actions Workflows

Prisma Clud

As we discussed in the previous blog post, Third-Party GitHub Actions: Effects of an Opt-Out Permission Model , the permissive nature of GitHub Actions workflows is prevalent throughout the open-source community and private projects on GitHub. Figure 3: Pyupio/safety’s action.yaml file pulls a mutable image with the ‘latest’ tag.

article thumbnail

Introducing New Azure Hands-On Labs

Linux Academy

Applying Tags to VMs in Azure Using Powershell. Modifying a Storage Account and Setting Blog Container to Immutable. Intro to Using Azure Blob Storage. Provision a SQL Data Warehouse Instance in Azure. Creating an Action Group in Azure. Securing Storage with Acces Keys and Shared Access Signatures in Microsoft Azure.

Azure 126
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

GitHub Actions: running them securely

Xebia

like this example is a bad idea: Option 1: Version tags You can add the version number of the action to the end of the configuration, but there is no way to verify if it is still the same code: the tag can be reused with new code changes in it, so adding this does not add real security to it.

article thumbnail

Azure Training Courses | New January Releases

Linux Academy

Get access to and practice in a live Azure console with these hands-on labs: Applying Tags to VMs in Azure Using PowerShell. Modify Storage Account and Set Blob Container to Immutable. The post Azure Training Courses | New January Releases appeared first on Linux Academy Blog. Get started with AZ-203 here.

Azure 80
article thumbnail

Scalable Annotation Service?—?Marken

Netflix Tech

Annotations Sometimes people describe annotations as tags but that is a limited definition. An annotation is an immutable object so the identity of the annotation always includes a version. We will cover more details on Semantic Search support in a future blog article.

article thumbnail

Introducing New Azure Hands-On Labs

Linux Academy

Applying Tags to VMs in Azure Using Powershell. Modifying a Storage Account and Setting Blog Container to Immutable. The post Introducing New Azure Hands-On Labs appeared first on Linux Academy Blog. Intro to Using Azure Blob Storage. Provision a SQL Data Warehouse Instance in Azure. Creating an Action Group in Azure.

Azure 19
article thumbnail

Functional Patterns in Domain Modeling - Composing a domain workflow with statically checked invariants

Ruminations of a Programmer

Phantom Types in the Mix Let's throw in some more types and see if we can tag in some more information for the compiler to help us. Let's tag each state of the workflow with a separate type. moment and you feel like documenting it as a design pattern. Remembering that we have a static type system at our disposal, can we do better ?