DevOps
How to Use GitHub Actions Workflow Lockfiles to Pin Every Dependency
GitHub's new actions.lock file records the exact commit behind each action. Here is how to create it, keep it current and avoid the allowlist trap.
#CI/CD security
2 articles2 articles on Backtrace tagged "CI/CD security."
2 articles
-
-
DevOpsHow to Upgrade GitLab for CVE-2026-110264, the CVSS 10 Critical Patch
GitLab shipped an out-of-band fix for an unauthenticated code execution bug that reaches back to version 7.0. Here is how to pick your target version, upgrade safely, and check logs afterward.