Hacker News: zhenjinghttps://news.ycombinator.com/user?id=zhenjingHacker News RSShttps://hnrss.org/hnrss v2.1.1Mon, 27 Apr 2026 16:16:39 +0000<![CDATA[New comment by zhenjing in "Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign"]]>I made a scanner(ActionPin) for the workflow patterns this compromise exposed.

ActionPin — a GitHub Actions hardening checker that flags unpinned third-party actions, overbroad workflow permissions, install scripts that touch secrets, and agent-triggered jobs that can reach production credentials. ActionPin host on github.

]]>Sat, 25 Apr 2026 08:46:30 +0000https://news.ycombinator.com/item?id=47899812zhenjinghttps://news.ycombinator.com/item?id=47899812https://news.ycombinator.com/item?id=47899812