Content by Erika Heidi (1)

Erika Heidi shares a practical checklist for hardening GitHub Actions workflows against software supply chain attacks, focusing on secrets exposure, token scope, protected branches/tags, dependency risk reduction, and concrete steps like pinning by digest and avoiding long-lived credentials.