Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use GitHub actions build steps from verified authors for improved security #36

Open
robinsmidsrod opened this issue Aug 9, 2022 · 0 comments

Comments

@robinsmidsrod
Copy link
Contributor

The GitHub Actions workflows we have are currently using automation steps from unknown/non-verified authors, which can potentially inject malicious code into our image, or perform malicious behavior during build.

To improve this we should use verified build steps, like this one:

https://github.com/marketplace/actions/build-and-push-docker-images

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant