Tag: GitHub Actions
Microsoft’s GitHub Hit by Major Outage as AI-Driven Demand Strains Infrastructure
Jon Swartz | | AI infrastructure, AI workflows, API, copilot, Downdetector, github, GitHub Actions, GitHub outages, GitHub Pages, microsoft, Microsoft TeamsGitHub, the Microsoft Corp.-owned code hosting platform serving more than 180 million developers, is still reeling from a widespread outage on Monday that severely disrupted software development pipelines globally. The hours-long incident ...
GitHub Hit by Widespread Outage, Halting Work for Global Developers
Jon Swartz | | AI coding, Anthropic, API, cloudbees, Cursor, Downdetector, error rates, github, GitHub Actions, GitHub Copilot, GitHub outages, microsoft, Microsoft Teams, OpenAI, SAML, service monitoring forums, Social media, Team SyncA major technical outage struck GitHub on Monday morning, disrupting workflows for millions of developers worldwide for several hours as critical services, automated testing pipelines, and artificial intelligence (AI) coding tools suffered ...
Fast-Moving Shai-Hulud Attack Infects npm Packages with 2 Billion Monthly Downloads
Jeff Burt | | Aikido Security, AWS, credential theft, GitHub Actions, HashiCorp Terraform, npm malware, Shai-Hulud worm, supply chain attackResearchers at Aikido Security and Endor Labs are tracking a fast-spreading supply-chain attack that is compromising a wide range of npm software packages that combined have more than 2 billion installs a ...
GitHub Gives Teams More Control Over Copilot’s Cloud Agent in Linear
Tom Smith | | agent guidance, agentic coding, AI coding agent, AI development workflow, automated pull requests, branch controls, Copilot cloud agent, custom coding agents, devops automation, engineering productivity, GitHub Actions, GitHub Copilot, GitHub Marketplace, Linear integration, Linear issues, mid-session steering, model selection, software development agentsGitHub’s Copilot cloud agent integration with Linear is now generally available, adding model, branch and team-level controls for delegated coding work ...
Novee Uncovers Cordyceps: The Latest Threat to CI/CD Pipelines
Jeff Burt | | AI coding agents, apache, CI/CD security, Cloudflare, code repositories, Cordyceps, GitHub Actions, google, microsoft, Novee, npm malware, PyPi, Python, supply chain attacks, WizA newly discovered supply chain security flaw is once again putting a spotlight on inherent weaknesses in CI/CD pipelines and the growing interest among cyberthreat actors to exploit them. Security researchers with ...
GitHub Removes PAT Requirement for Agentic Workflows
Tom Smith | | AI agents, automation, billing, Copilot CLI, enterprise, enterprise security, github, GitHub Actions, GitHub Agentic Workflows, GITHUB_TOKEN, Personal Access Tokens, security, workflow automationGitHub Agentic Workflows can now use GitHub Actions' built-in GITHUB_TOKEN instead of a personal access token (PAT). That means developers no longer need to create, store, or rotate a PAT to run ...
Security Flaw in Claude Code Illustrates the Risk of AI in Developer Workflows
Jeff Burt | | agentic AI in development, Anthropic Claude Code, bash, CI/CD and AI agents, exposed secrets, GitHub Actions, microsoft, prompt injectionAI coding agents are reshaping software development—but they’re also expanding the attack surface. Researchers uncovered a now-patched vulnerability in Anthropic’s Claude Code GitHub Action that could have enabled prompt injection attacks to ...
Shai-Hulud Clone ‘Miasma’ Compromises 32 Red Hat npm Packages
Jeff Burt | | Aikido Security, CI/CD (Continuous Integration/Continuous Deployment), Cloud Security, credential security, GitHub Actions, leaked secrets, npm malware, Orca Security, Shai-Hulud worm, TeamPCP, WizThe threat group behind the notorious Mini Shai-Hulud worm last month put the complete source code for the malware into a GitHub repository, essentially open sourcing the threat so that other bad ...
Critical Microsoft GitHub Flaw Highlights Dangers to CI/CD Pipelines: Tenable
Jeff Burt | | Aqua Security Trivy, CI/CD cyberthreats, exposed secrets, GitHub Actions, IANS Research, malicious code, microsoft, OWASP Top 10, remote code execution, software development security, software supply chain attacks, software vulnerabilities, TenableA critical vulnerability in a popular Microsoft GitHub repository could allow a threat actor to easily exploit its CI/CD infrastructure to run arbitrary code in the repository and gain access to secrets, ...
Sophisticated Supply Chain Attack Targeting Trivy Expands to Checkmarx, LiteLLM
Jeff Burt | | AI (Artificial Intelligence), AI supply chain attacks, Aqua Security Trivy, Checkmarx, Cloud Security, credentials, exposed secrets, GitHub Actions, LiteLLM, microsoft, Palo Alto Networks, Sysdig, TeamPCPThe supply chain attack that compromised Aqua Security’s Trivy open source security vulnerability scanner and its associated GitHub Actions earlier this month continues to expand, with software development tools from Checkmarx and ...
Anthropic Adds Automated Security Reviews to Claude Code
Tom Smith | | AI code security, CI/CD, devsecops, GitHub Actions, secure coding, security review, shift left security, vulnerability detectionAnthropic pulls security into the inner dev loop with new Claude Code tools that scan for vulnerabilities in the terminal and on every pull request—before insecure code ever ships ...
Best of 2025: GitHub Action Compromise Risks Data Leaks for 23,000 Repositories
The attacker introduced malicious Python code that would expose secrets like authentication credentials in public repositories ...
