GitHub Actions

Compromised GitHub Actions Were Re‑enabled and Resumed Running Old Mini Shai‑Hulud Malware

The reactivation allowed injected code to harvest CI/CD credentials, highlighting the need for SHA pinning, secret rotation, workflow audits.