The home for great developer writing.

We surface the best developer writing from thousands of independent blogs, updated daily.

github: Safer pull_request_target defaults for GitHub Actions checkout

· Sujith Quintelier · June 19, 2026, 5:01 a.m.

github Security DevOps software development

Summary

GitHub is updating the default settings for the Actions checkout action in workflows triggered by pull_request_target to enhance security by preventing exposure of sensitive credentials to untrusted pull request code.

Read full post on quintelier.dev →

MORE POSTS LIKE THIS

How to publish to PyPI using GitHub Actions securely

brettcannon · Jul 7, 2026

Python packaging

Claude Code’s “Don’t Ask Again” Left Secrets in 1,122 Public GitHub Files. Your Agent’s Settings Are Code Now

Qodo · Nov 10, 2026

code reviews AI code review

GitHub Actions without GitHub

Depot · Sep 10, 2026

DevOps ci/cd

# The CI/CD Pipeline That Was Lying to Us: A Deploy Debugging Story

Vicente G. Reyes · Sep 1, 2026

githubactions Docker

A deep dive into GitHub Actions

Flaviocopes · Aug 27, 2026

Security DevOps

github: Block users directly from security advisories

Sujith Quintelier · Aug 26, 2026

github Security

Discover more posts →

AUTHOR