How to secure GitHub Actions workflows: 4 tips to handle untrusted input and tighten permissions
Researchers from Purdue and NCSU have found a large number of command injection vulnerabilities in the workflows of projects on GitHub. Follow these four tips to keep your GitHub Actions workflows secure.