catch us tomorrow morning at @NorthSec for an overview on finding vulnerable GitHub Actions workflows in open-source projects at scale, ways of living in a pipeline, and a new SAST tool to analyze CI workflows! #nsec #appsec #supplychain