logoalt Hacker News

eithed • yesterday at 2:58 PM • 1 reply • view on HN

Tests would have caught it = https://github.com/rhysd/actionlint injection check

Replies

thejosh • yesterday at 3:24 PM

also been a huge fan of zizmor (https://github.com/zizmorcore/zizmor) lately, basically: "am I going to footgun myself?"