News for hackers. Stuff that matters.

A comment on Show HN: Proactive Security Monitoring for GitHub Actions Workflows.

Re:Show HN: Proactive Security Monitoring for GitHub Actions... by belikebakr on Wednesday June 26, 2024 @03:27PM (#40803615)
Hey, a couple questions:

1. Can listen.dev handle the monitoring of dynamically generated or short-lived GitHub Actions, which may only exist for the duration of a pull request? 2. How does listen.dev differentiate between normal and anomalous behavior without extensive prior data on a new user’s workflows?

[ Parent | on HN ]
Re:Show HN: Proactive Security Monitoring for GitHub Actions... by rafaeldavidtin on Wednesday June 26, 2024 @03:35PM (#40803723)
About short lived, or dynamically generated, steps: yes (or it is a bug if it can't). About tasks duration: it does not matter if a task existed for 1 ms or 10 mins, we catch what we need/want (with almost no overhead, at all).

About differentiating behaviors, we are going to provide more details in documentation very soon.

Thanks!

[ Parent | on HN ]