The home for great developer writing.

We surface the best developer writing from thousands of independent blogs, updated daily.

github: Safer pull_request_target defaults for GitHub Actions checkout

1 · Sujith Quintelier · June 19, 2026, 5:01 a.m.

github GitHub Actions Security software development

Summary

GitHub is updating the default settings for the Actions checkout action in workflows triggered by pull_request_target to enhance security by preventing exposure of sensitive credentials to untrusted pull request code.

Read full post on quintelier.dev →

MORE POSTS LIKE THIS

How to publish to PyPI using GitHub Actions securely

brettcannon · Jul 7, 2026

Python packaging

Why your RBAC linter misses privilege escalation chains (and how to fix it)

Red Hat · Jul 7, 2026

Kubernetes rbac

github: More control over your GitHub-hosted runners

Sujith Quintelier · Jun 26, 2026

GitHub Actions development tools

Make GitHub Actions Do More For You

Mike McQuaid · Jun 22, 2026

GitHub Actions deployment

Building a CI/CD pipeline for Sigma rules

andreafortuna · Jun 22, 2026

Security Detection Engineering

GitHub Actions is the weakest link

Andrew Nesbitt · Apr 28, 2026

github Security

Discover more posts →

AUTHOR