GitHub Actions tag force-push enables supply chain code injection

Snyk insight details requires a free account. Sign in with Google or GitHub to access the full knowledge base.