[netvarun]

@dang: The original URL (from Step Security, the company that discovered this flaw) is a better source for this:

https://www.stepsecurity.io/blog/harden-runner-detection-tj-...

[moyer]

Yeah maybe we can merge with https://news.ycombinator.com/item?id=43367987

[dang]

Comments moved thither. Thanks!