News for hackers. Stuff that matters.

A comment on The Pain That Is GitHub Actions.

Re:The Pain That Is GitHub Actions by TheHackerDev on Friday March 21, 2025 @09:19PM (#43442429)
If you want an easy solution for GitHub Actions security, check out Garnet.ai (formerly listen.dev). They were built for GitHub first. And it’s free for single projects - https://dashboard.listen.dev/.
[ Parent | on HN ]
Re:The Pain That Is GitHub Actions by belikebakar on Friday March 21, 2025 @09:25PM (#43442453)
Does it allow to integrate directly into the action runner?
[ Parent | on HN ]
Re:The Pain That Is GitHub Actions by fkjadoon94 on Friday March 21, 2025 @09:35PM (#43442494)
Yes, its a one step integration into your workflow file, typically before the steps you want to monitor eg. build, test if you don't want to see everything happening in your runner host. It has worked pretty well with ubuntu-latest and stock Linux runners from GH out of the box.
[ Parent | on HN ]
Re:The Pain That Is GitHub Actions by fkjadoon94 on Friday March 21, 2025 @09:43PM (#43442533)
The integration basically wraps *jibril - a single binary linux edr which allows for detection and enforcement in the runner

https://jibril.sh

[ Parent | on HN ]