<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:media="http://search.yahoo.com/mrss/"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>github actions security &#8211; Blue Headline</title>
	<atom:link href="https://blueheadline.com/tag/github-actions-security/feed/" rel="self" type="application/rss+xml" />
	<link>https://blueheadline.com</link>
	<description>Powered by Research</description>
	<lastBuildDate>Mon, 13 Apr 2026 20:59:07 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	

<image>
	<url>https://i0.wp.com/blueheadline.com/wp-content/uploads/2025/04/cropped-Blue-Headline-Favicon-v6.1-1.jpg?fit=32%2C32&#038;ssl=1</url>
	<title>github actions security &#8211; Blue Headline</title>
	<link>https://blueheadline.com</link>
	<width>32</width>
	<height>32</height>
</image> 
<site xmlns="com-wordpress:feed-additions:1">185989229</site>	<item>
		<title>GitHub’s Supply Chain Warning Is Really About Secret Theft, Not Just Bad Packages</title>
		<link>https://blueheadline.com/cybersecurity/github-supply-chain-secret-theft/</link>
					<comments>https://blueheadline.com/cybersecurity/github-supply-chain-secret-theft/#respond</comments>
		
		<dc:creator><![CDATA[Blue Headline]]></dc:creator>
		<pubDate>Mon, 27 Apr 2026 07:00:00 +0000</pubDate>
				<category><![CDATA[Cybersecurity & Digital Integrity]]></category>
		<category><![CDATA[cybersecurity]]></category>
		<category><![CDATA[dependabot]]></category>
		<category><![CDATA[github actions security]]></category>
		<category><![CDATA[github supply chain security]]></category>
		<category><![CDATA[oidc]]></category>
		<category><![CDATA[open source security]]></category>
		<category><![CDATA[secret exfiltration]]></category>
		<category><![CDATA[trusted publishing]]></category>
		<guid isPermaLink="false">https://blueheadline.com/?p=10719</guid>

					<description><![CDATA[GitHub says modern supply-chain attacks increasingly start with secret exfiltration from GitHub Actions, not just poisoned packages further downstream.]]></description>
		
					<wfw:commentRss>https://blueheadline.com/cybersecurity/github-supply-chain-secret-theft/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<media:content url="https://blueheadline.com/wp-content/uploads/2026/04/github-supply-chain-secret-theft-featured.png" medium="image"></media:content>
            <post-id xmlns="com-wordpress:feed-additions:1">10719</post-id>	</item>
	</channel>
</rss>
