Ken Muse
From the Codecov Bash Uploader and IAmRoot exploits to compromised Actions, the threat landscape is evolving rapidly — as attackers increasingly target your CI/CD processes, not just your applications. In this workshop, you’ll learn how to design a secure, production‑ready CI/CD foundation on GitHub Actions that protects your pipeline and deploys without long‑lived secrets. You’ll explore techniques for securing your supply chain, implementing least privilege, enforcing guardrails, and eliminating secrets from your deployments. Discover strategies used by top companies to build trust into their delivery pipelines and ship faster with less risk.