GitHub Actions Stories

Global Stories

GitHub Actions stories

New Relic touts Microsoft partnership as bookings rise

Marketplace bookings through Microsoft rose by double digits as New Relic deepened integrations aimed at helping customers manage AI-era software risk.

By Mark Tarre • 4 min read • Last week

DevOps

GitHub launches Copilot desktop app for agentic work

Developers can now manage multiple AI coding agents in one place as GitHub tests a desktop Copilot app with worktree automation and review tools.

By Mark Tarre • 4 min read • Last week

Disaster Recovery

DevOps platform vulnerabilities rise in 2025 report

More than half of patched flaws in major DevOps tools were high or critical in 2025, putting software supply chains at greater risk.

By Mark Tarre • 4 min read • Last week

DevOps

Tenable finds GitHub workflow flaw in Microsoft repo

A flaw in a widely watched Microsoft repository could have let attackers run code and steal secrets through GitHub Actions, Tenable said.

By Mark Tarre • 4 min read • Last month

DevOps

Tenable flags Microsoft GitHub workflow flaw exposing code

A critical flaw in a widely used Microsoft code-sample repository could have let attackers steal secrets and run code through GitHub issues.

By Sean Mitchell • 4 min read • Wed, 22nd Apr 2026

Malware

Orca Security flags AI secrets & supply chain gaps

Leaked AI credentials and unpatched dependencies are leaving production systems exposed across US and European organisations, Orca Security said.

By Shannon Williams • 4 min read • Fri, 10th Apr 2026

Virtualisation

AppOmni adds Heisenberg mode after LiteLLM supply attack

The malicious packages could leave build systems and Kubernetes clusters exposed, prompting checks across CI/CD pipelines and AI frameworks.

By Sean Mitchell • 4 min read • Fri, 27th Mar 2026

DevOps

NetRise launches Provenance to trace open source risk

Enterprises could spot compromised maintainers sooner, as the new tool maps open-source contributors, dependencies and policy breaches across builds.

By Sean Mitchell • 5 min read • Thu, 26th Mar 2026

DevOps

Trivy GitHub breach exposes CI/CD supply chain risk

Aqua Security's Trivy GitHub Action was hijacked to ship infostealer code via CI/CD pipelines, exposing secrets across downstream users.

By Sofiah Nichole Salivio • 5 min read • Tue, 24th Mar 2026

Data Protection

1Password debuts Unified Access to secure AI agents

1Password unveils Unified Access to secure AI agents and machine credentials, promising endpoint-to-agent visibility for security teams.

By Sean Mitchell • 5 min read • Thu, 19th Mar 2026

Security Information and Event Management

GitHub backs Alpha-Omega with fresh open source funds

GitHub joins tech giants in a USD $12.5 million Alpha-Omega push, boosting AI-powered defences for critical open source software.

By Joseph Gabriel Lagonsin • 4 min read • Wed, 18th Mar 2026

Security Information and Event Management

JFrog flags 13 critical CI/CD flaws in GitHub workflows

JFrog warns 13 GitHub CI/CD workflow flaws, mostly critical, could let attackers hijack pipelines and steal secrets at scale.

By Mark Tarre • 4 min read • Fri, 6th Mar 2026

DevOps

Datadog flags rising DevSecOps risk from ageing code

Datadog warns 87% of organisations run software with exploitable flaws as ageing code, fast releases and automation amplify DevSecOps risk.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 27th Feb 2026

Supply Chain

GitHub unveils Agentic Workflows for safer AI automation

GitHub debuts Agentic Workflows, using AI agents with strict guardrails to automate repo chores while keeping maintainers in control.

By Karen Joy Bacudo • 4 min read • Mon, 16th Feb 2026

Software-as-a-Service

GitHub cuts Actions runner prices, adds new usage fee

GitHub will cut Actions hosted runner prices by up to 39% from 2026 while adding a new USD $0.002-a-minute fee for self-hosted use.

By Sean Mitchell • 4 min read • Wed, 17th Dec 2025

DevOps

Keeper Security named Overall Leader in non-human identity management

Keeper Security named Overall Leader in non-human identity management, praised for securing machine identities across cloud-native and hybrid environments.

By Sean Mitchell • 3 min read • Fri, 5th Dec 2025

Application Security

AppOmni launches Heisenberg to tackle software supply risks

AppOmni has launched Heisenberg, an open source tool that detects and prevents risky software dependencies by inspecting changes in real time at pull requests.

By Catherine Knowles • 4 min read • Thu, 30th Oct 2025