lucian_constantin@idg.com / Network World
Software projects face supply chain security risk due to insecure artifact downloads via GitHub Acti – Cybersecurity researchers found risks in the GitHub Actions platform that could enable attackers to inject malicious code into software projects and initiate a supply chain attack. …