Packagist on Mythryl: “CI/CD pipelines are a prime target for supply chain attacks. We…”

CI/CD pipelines are a prime target for supply chain attacks. We hardened the GitHub Actions workflows for Composer, Packagist and Private Packagist with 🌈zizmor and wrote down how to do the same on yours. blog.packagist.com/securing-ou... #php #phpc #composerphp #github #githubactions #zizmor

blog.packagist.comSecuring our GitHub Actions workflows with zizmorThis is the next post in our supply chain security series, following the supply chain security update, the Composer 2.10 release and immutable version metadata on Packagist.org. The earlier posts covered Composer behavior, changes to Packagist.org, and Private Packagist features. Today we’ll cover how we hardened

23/7/26, 1:45 pm4 reposts8 likes

Post