Skip to content
CoreUp.
ArticlesTopicsAboutSearch
  1. Home
  2. #SupplyChainSecurity

Tag

#SupplyChainSecurity

Every published note connected to SupplyChainSecurity.

2 articles

Why Did GitHub Actions Hold Your Workflow for Approval? The New Security Gate Explained
Software·17 August 2026

Why Did GitHub Actions Hold Your Workflow for Approval? The New Security Gate Explained

GitHub now automatically pauses some potentially malicious Actions runs in public repositories. Here is how to tell that security hold from ordinary fork or bot approvals and what to inspect before clicking Approve.

9 min readRead article →
npm 12 Stopped Running Dependency Install Scripts by Default: How to Fix Builds Safely
Software·12 August 2026

npm 12 Stopped Running Dependency Install Scripts by Default: How to Fix Builds Safely

npm 12 now blocks unapproved dependency install scripts by default. Here is how to diagnose broken installs, approve only the scripts you trust, and handle the other new Git and remote-URL restrictions.

8 min readRead article →
CoreUp.

Practical notes on software, products, languages, money, and life.

AboutContactPrivacyCookiesRSS
© 2026 /licoBuilt carefully, published deliberately.