GitHub “besieged” by malware repositories and repo confusion: Why you'll be ok

Kaspersky uncovers over 250,000 potential security issues in GitHub Actions workflows

GitHub Maintainer Security Advisories

GitHub confirms breach of 3,800 repos via malicious VSCode extension

Analysis of Ambiguous "May Be Licensed" Language in GitHub Mattermost Repository License

The article discusses a licensing issue with GitHub's Mattermost server repository, specifically pointing to ambiguous language in the LICEN

The case for GitHub Actions security after recent supply chain attacks

Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data