GitHub Action Tag Hijacking: How to Secure CI/CD Pipelines

A new supply chain attack reveals how attackers manipulate Git tags to inject malicious code into…