Semgrep eventsGitHub Actions are quietly powering countless open-source and commercial projects—but they’re also an emerging target for attackers. From subtle pipeline misconfigurations to command injection exploits, threat actors are getting creative with how they compromise CI/CD systems. This webinar dives into the overlooked security risks of GitHub Actions and shows how to catch issues before they become backdoors.
Takeaways:
Spot common misconfigurations in GitHub Actions workflows before attackers do
Learn how command injection attacks work—and how to defend against them
Build safer pipelines with practical techniques for detection and mitigation