GitHub Actions

Discussions, questions and news about GitHub Actions from cybersecurity professionals on Cyberr.

0 members · 26 posts

Top discussions

🚀 Open to Remote Work | Front-End Developer | Job & Internship Opportunities Hello cyberr Network! 👋 I’m ac…

Ather sultan — Front-End Developer | React.js | JavaScript | HTML5 | CSS3 | Tailwind CSS | Open to Remote Opportunities

🚀 Open to Remote Work | Front-End Developer | Job & Internship Opportunities Hello cyberr Network! 👋 I’m actively looking for remote opportunities as a Front-End Developer, where I can contribute my skills, learn from experienced developers, and build modern, responsive, and u…

· 2 reactions · 0 comments

You may have written 99% of your application code—and still be trusting thousands of lines you didn't write.…

samuel watua Soita — Full Stack Software Engineer

You may have written 99% of your application code—and still be trusting thousands of lines you didn't write. That's the uncomfortable reality of modern software development. A typical application depends on: → npm packages → Python packages → Docker images → GitHub Actions → Clo…

· 1 reactions · 0 comments

PromptFuzz v2 has been released and uploaded to my github after months of hands-on LLM red-teaming. Spent the…

David Seagal — Information Security Engineer / Security Operations Consultant

PromptFuzz v2 has been released and uploaded to my github after months of hands-on LLM red-teaming. Spent the last few months actually breaking LLM applications in production environments, RAG pipelines leaking documents across users, MCP tool descriptions executing embedded ins…

· 2 reactions · 1 comments

📦 The software supply chain surface just expanded again. For the first time, threat actors are actively usin…

Schomer — Principal Security Solutions Architect & Founder

📦 The software supply chain surface just expanded again. For the first time, threat actors are actively using the centralized HashiCorp Registry to distribute malicious Go-based payloads disguised as legitimate Terraform providers. This highlights a massive systemic risk: engin…

· 3 reactions · 0 comments

Operation Sentinel update — now parsing external identity surfaces hunter.py: off-hours admin detection if e.…

Melissa Wozney — Detection Engineer | IAM & ITDR Analyst | SOC & GRC Specialist | Python SIEM Automation (120m→30m) | DORA & NIS2 Compliance | Triple MSc CS/DS/AI | W-8BEN Approved Contractor (Remote CET/EST)

Operation Sentinel update — now parsing external identity surfaces hunter.py: off-hours admin detection if e.role == 'admin' and e.hour not in range(9,17): flag(e) — 120m → 30m NEW: linkedin_hunter.py parses LinkedIn Logins.csv (Login.csv export) for impossible travel / off-hour…

· 4 reactions · 0 comments

Operation Sentinel update — now parsing external identity surfaces I built hunter.py to flag off-hours admin…

Melissa Wozney — Detection Engineer | IAM & ITDR Analyst | SOC & GRC Specialist | Python SIEM Automation (120m→30m) | DORA & NIS2 Compliance | Triple MSc CS/DS/AI | W-8BEN Approved Contractor (Remote CET/EST)

Operation Sentinel update — now parsing external identity surfaces I built hunter.py to flag off-hours admin logins: if e.role == 'admin' and e.hour not in range(9,17): flag(e) — cut IAM review 120m → 30m. New: extended it to parse LinkedIn security exports (Logins.csv) for unau…

· 3 reactions · 0 comments

So, all tasks are done. 📦 As my internship wraps up, I’m taking a moment to look back at the steep learning…

IFEANYI MAXWELL AKABOGU — Cloud Security Engineer (In Training) | Network & Cloud Architecture | Founder @ GizmoFix Repair Services

So, all tasks are done. 📦 As my internship wraps up, I’m taking a moment to look back at the steep learning curve I’ve climbed. Walking into the cloud engineering space, I knew it was vast—but the hands-on experience of actually building and securing infrastructure has been inc…

· 6 reactions · 1 comments

I’m excited to announce the launch of my latest cybersecurity portfolio project: Vulnerability Risk Dashboard…

Chigoziem Ibeh — Cloud Security & Cybersecurity Engineer | Microsoft Sentinel, Azure, SIEM, IAM & Vulnerability Management

I’m excited to announce the launch of my latest cybersecurity portfolio project: Vulnerability Risk Dashboard Security teams often receive hundreds or even thousands of vulnerability findings, but the real challenge is not simply identifying vulnerabilities. The real challenge i…

· 4 reactions · 0 comments

There is a security problem at the intersection of AI and software development that is growing faster than th…

David Seagal — Information Security Engineer / Security Operations Consultant

There is a security problem at the intersection of AI and software development that is growing faster than the industry is responding to it. AI coding tools, Copilot, Cursor, ChatGPT, Claude, Gemini, are now writing substantial portions of production code at most software compan…

· 1 reactions · 0 comments

I was a teacher before I was an auditor. Today GitHub caught me making the same mistake I warn clients about.…

Melissa Wozney — Detection Engineer | IAM & ITDR Analyst | SOC & GRC Specialist | Python SIEM Automation (120m→30m) | DORA & NIS2 Compliance | Triple MSc CS/DS/AI | W-8BEN Approved Contractor (Remote CET/EST)

I was a teacher before I was an auditor. Today GitHub caught me making the same mistake I warn clients about. Got an alert: "Codeanywhere authorized to access your account." I had clicked "Login with GitHub" earlier, then closed the tab. Forgot about it. GitHub did not. My hunte…

· 5 reactions · 1 comments

I created a personal portfolio website using code to showcase my certifications, projects, skills, and more.…

Fatima Zoghbor — Master's of Applied Cybersecurity Student | Fresh Bachelor's Graduate

I created a personal portfolio website using code to showcase my certifications, projects, skills, and more. This portfolio was built using React, Vite, and Tailwind CSS, and deployed using GitHub Pages. It includes responsive design and a modern UI to present my work in a clear…

· 5 reactions · 0 comments

🚀 Introducing SkillWorth AI by 24SevenHUB Digital Choosing a digital skill should not feel like gambling wit…

Chigoziem Ibeh — Cloud Security & Cybersecurity Engineer | Microsoft Sentinel, Azure, SIEM, IAM & Vulnerability Management

🚀 Introducing SkillWorth AI by 24SevenHUB Digital Choosing a digital skill should not feel like gambling with your time, money and future. Every year, thousands of students, graduates, interns, career changers and young professionals enrol in online courses because a skill is t…

· 1 reactions · 0 comments

Bonjour, pour cette nouvelle Newsletter, nous avons décidé de parler sécurité et conformité des Pipelines CI/…

Maudrux Adrian — Directeur Général France | Le futur du recrutement | Cyberr.ai

Bonjour, pour cette nouvelle Newsletter, nous avons décidé de parler sécurité et conformité des Pipelines CI/CD. D'abord, parce que l'ANSSI vient de sortir une étude sur le sujet, ensuite parce que c'est l'un de nos chevaux de bataille depuis deux ans. 1. L'étude de L'ANSSI Le p…

· 4 reactions · 0 comments

Just finished setting up my verified SOC Analyst profile! 🛡️ I’m a ‘Dual-Threat’ candidate (Web Dev + Securi…

OLUWATOYIN OYEDIJO — Security Operations & Threat Analysis

Just finished setting up my verified SOC Analyst profile! 🛡️ I’m a ‘Dual-Threat’ candidate (Web Dev + Security) based in the Greater Toronto Area. With my ISC2 CC and CompTIA Security+ verified, I’m ready to help a local team defend their architecture. Specializing in: Threat D…

· 5 reactions · 0 comments

hipped Identity Behavior Hunter – Python tool for DORA Art 10 compliance. Moves from binary geo-fencing to mu…

Melissa Wozney — Detection Engineer | IAM & ITDR Analyst | SOC & GRC Specialist | Python SIEM Automation (120m→30m) | DORA & NIS2 Compliance | Triple MSc CS/DS/AI | W-8BEN Approved Contractor (Remote CET/EST)

hipped Identity Behavior Hunter – Python tool for DORA Art 10 compliance. Moves from binary geo-fencing to multi-factor risk scoring (0-10) with live threat intel enrichment. Flags VPNs, hosting infra, and location spoofing. London test case: 9.0/10 risk. Code: [https://github.c…

· 0 reactions · 0 comments

One of the biggest shifts happening in offensive security right now is invisible to most scanners. Attackers…

Damian Kuś — Penetration Tester / Offensive Security Engineer

One of the biggest shifts happening in offensive security right now is invisible to most scanners. Attackers increasingly stop using: malware, zero-days, or noisy ransomware. Instead: they live inside trusted infrastructure. Microsoft 365. OAuth integrations. Delegated access. C…

· 0 reactions · 0 comments

Week 1 of learning in public: reviewing TCP/IP, DNS, and SIEM basics for IAM work. Notes are in my GitHub. No…

Melissa Wozney — Detection Engineer | IAM & ITDR Analyst | SOC & GRC Specialist | Python SIEM Automation (120m→30m) | DORA & NIS2 Compliance | Triple MSc CS/DS/AI | W-8BEN Approved Contractor (Remote CET/EST)

Week 1 of learning in public: reviewing TCP/IP, DNS, and SIEM basics for IAM work. Notes are in my GitHub. Not polished, just documenting as I go. Week 1: fundamentals review – TCP/IP, DNS, SIEM parsing. I use truth, not performance: "Breaking into cybersecurity is harder than I…

· 0 reactions · 0 comments

Join the discussion on Cyberr