Hacker News new | ask | show | jobs
Disrupting supply chain attacks on NPM and GitHub Actions (github.blog)
23 points by nyku 2 hours ago
1 comments

It's very easy to disrupt supply chain attacks on NPM: Don't use it.

It's also very easy to disrupt supply chain attacks with Github Actions: Don't use them either.

The job can require you to
Not sure I want to work for a company that is a Javascript house.
These comments should be removed r from HN, because they in no way actually add to the conversation. They aren’t intelligent, they aren’t insightful, they aren’t actionable, and they don’t invite a genuine reply. All you’re saying is that you happen to not use these technologies yourself – something that I’m sure is only by happenstance – and that you feel superior for it.
This is such a myopic take
GitHub actions doesn’t really make you a js shop
> Opting out of toxic ecosystems is a valid option

Quick, everyone break out the pitchforks for a valid analysis of a game! /s