Seven CI/CD Hardening Steps to Block Future tj‑actions Supply‑Chain Attacks
The Open Source Security Foundation publishes a post‑mortem of the March 2025 tj‑actions breach and lists seven concrete hardening techniques—pinning actions to immutable SHAs, enforcing allow‑lists, tightening token scopes, using Dependabot for actions, among others—to stop similar supply‑chain attacks in CI/CD pipelines.