linneman
labs
building
breaking
observing
content
···
verified
home
/ github actions
Github Actions
2026.03.20
Modeling hackerbot-claw Against My Own CI/CD
A single pull_request_target misstep turns a trusted GitHub workflow into a supply-chain backdoor.