Securing GitHub Actions CI dependencies: Recipe card

RecipeGitHub Actions CI dependenciesTarget audience (the chef)Project maintainers and developers who need practical, concrete steps to efficiently secure CI dependencies within their GitHub Actions workflowsScope (ingredients)Dependencies within the GitHub Actions, Github Action runner image, Choosing CI dependencies, Responding to vulnerabilities in CI dependenciesOut of scope (do not add)Writing your own custom actions, Other CI tools, Other types of dependencies (code, test, container, etc), Transitive dependencies, SBOMs – provenance TLDR: 🗹 Source the Best Ingredients: Evaluate before…