GitHub/Repository Security/GitHub Workflows & Actions: Revision history

19 May 2025

• curprev 09:4109:41, 19 May 2025‎ Fkiriakos talk contribs‎ 12,507 bytes +534‎ add a guideline about caching
• curprev 09:3209:32, 19 May 2025‎ Fkiriakos talk contribs‎ m 11,973 bytes +3‎ move sample dockerignore file into a separate section
• curprev 09:2109:21, 19 May 2025‎ Fkiriakos talk contribs‎ m 11,970 bytes +38‎ reordering the headers and sections in the page
• curprev 09:0609:06, 19 May 2025‎ Fkiriakos talk contribs‎ m 11,932 bytes +205‎ add instructions to review all code run as part of the workflow

9 April 2025

• curprev 15:4415:44, 9 April 2025‎ Fkiriakos talk contribs‎ 11,727 bytes +2‎ use 5th level heading
• curprev 15:4215:42, 9 April 2025‎ Fkiriakos talk contribs‎ m 11,725 bytes +210‎ moving recommendation about excluding gcp token file under .dockerignore guidelines

21 March 2025

• curprev 16:2516:25, 21 March 2025‎ Tarekel talk contribs‎ m 11,515 bytes −2‎ Just changing the spacing on the page
• curprev 16:2416:24, 21 March 2025‎ Tarekel talk contribs‎ 11,517 bytes +30‎ Needed to update and add the bulletpoints
• curprev 16:1116:11, 21 March 2025‎ Tarekel talk contribs‎ 11,487 bytes +9‎ Added bullet points to the new advisory
• curprev 16:0616:06, 21 March 2025‎ Tarekel talk contribs‎ 11,478 bytes +753‎ Added a advisory following the recent github tnj action compromise

19 March 2025

• curprev 12:2312:23, 19 March 2025‎ Tarekel talk contribs‎ 10,725 bytes +4,691‎ Added a Docker Security Best Practices Section

22 October 2024

• curprev 18:1518:15, 22 October 2024‎ Hwine talk contribs‎ 6,034 bytes +204‎ added harden-runner info

3 October 2024

• curprev 17:4417:44, 3 October 2024‎ Hwine talk contribs‎ 5,830 bytes +146‎ Add OpenSSF article

4 September 2024

• curprev 11:4911:49, 4 September 2024‎ Fkiriakos talk contribs‎ m 5,684 bytes +428‎ adding a note about validating dependabot in a secure way based on bug https://bugzilla.mozilla.org/show_bug.cgi?id=1914746

29 August 2024

• curprev 16:1516:15, 29 August 2024‎ Hwine talk contribs‎ 5,256 bytes +14‎ Make "octoscan" visible, as it's mentioned in various instruction s

8 August 2024

• curprev 15:3915:39, 8 August 2024‎ Hwine talk contribs‎ 5,242 bytes +237‎ Added another scanning tool

15 July 2024

• curprev 22:4222:42, 15 July 2024‎ Hwine talk contribs‎ 5,005 bytes +124‎ more recommendations for least privilege

11 July 2024

• curprev 15:0015:00, 11 July 2024‎ Hwine talk contribs‎ 4,881 bytes +249‎ updated with 'actions/checkout' tip

10 July 2024

• curprev 23:5023:50, 10 July 2024‎ Hwine talk contribs‎ 4,632 bytes +150‎ formatting fix

26 June 2024

• curprev 13:0313:03, 26 June 2024‎ Cknowles-moz talk contribs‎ 4,482 bytes −6‎ →‎Scanning Tools: Changed the install link to point to actions install rather than app

25 June 2024

• curprev 22:2522:25, 25 June 2024‎ Hwine talk contribs‎ m 4,488 bytes +12‎ typos
• curprev 22:2222:22, 25 June 2024‎ Hwine talk contribs‎ 4,476 bytes +284‎ Add link to instructions on having action allowed for an org.

21 June 2024

• curprev 20:1720:17, 21 June 2024‎ Hwine talk contribs‎ 4,192 bytes +4,192‎ Initial draft