GitHub Actions - is it safe? - DevConf.CZ 2022
Speaker: Jiří Konečný The GitHub Actions is a great tool which helps you with the testing of your project or do almost any sort of automation you want to. This is great but is it safe? Join me on this session where I will discuss about setups you would rather want to avoid and what are a good alternatives for these. You will find these hints especially useful if you are using self-hosted runners to avoid crypto mining, hijacking your machines or getting into your internal network. However, even if you don't have self-hosted runners, you should be aware of other issues which could result in giving an attacker commit rights to your project and your secrets. Sched: https://sched.co/siGi
Speaker: Jiří Konečný The GitHub Actions is a great tool which helps you with the testing of your project or do almost any sort of automation you want to. This is great but is it safe? Join me on this session where I will discuss about setups you would rather want to avoid and what are a good alternatives for these. You will find these hints especially useful if you are using self-hosted runners to avoid crypto mining, hijacking your machines or getting into your internal network. However, even if you don't have self-hosted runners, you should be aware of other issues which could result in giving an attacker commit rights to your project and your secrets. Sched: https://sched.co/siGi