Coverage 1 publisher
Articles stay on their publishers’ sites; each link opens the original.
Bringing full YAML anchor support to zizmor
zizmor adds full YAML anchor support to its static analysis of GitHub Actions workflows. The update follows an attack in which a pull_request_target misconfiguration in aquasecurity/trivy-action exposes secrets that are then used to backdoor LiteLLM on PyPI.