PREVENT CI/CD PIPELINE COMPROMISES WITH DROP-IN REPLACEMENTS FOR 1,000+ GITHUB ACTIONS

Summary from the TLDR DevOps newsletter

Chainguard Actions is now Generally Available: a hardened catalog of over 1,000 popular actions, delivered as drop-in replacements for the actions developers already want to use. > CONTINUOUSLY VERIFIED AND HARDENED as upstream versions ship and attack patterns emerge. > EVERY ACTION INCLUDES A HARDENING.MD REPORT detailing which vulnerabilities were found and removed. > ONE-BUSINESS-DAY SLA for new action requests. Developers don't have to change how they work to use actions safely.