GitHub Actions Exposed: Securing Critical Code Automation that Runs Your Software Factory

GitHub Actions can quickly hand attackers the keys to your company’s most critical code infrastructure — without the right controls and protections in place, the implications are more severe than you may know. 

The Legit research team recently analyzed more than 2.5 million GitHub Actions workflow files belonging to over 553,000 organizations and personal users. The team found that most GitHub Actions workflows are insecure in some way; they’re overly privileged, contain risky dependencies and misconfigurations, etc. 

Join this webinar to understand: 

• Key findings and consequences of our research into GitHub Actions security
• How GitHub Actions workflows are exploited in the wild
• Practical steps to harden your CI/CD pipelines and workflows and mitigate the risks lurking in your GitHub Actions activity