1. Actions Hardening #1: Keeping Attacker Code Out of Workflows (2026-10-28)
  2. Actions Hardening #2: Limiting What a Compromised Job Can Steal (2026-10-28)
  3. Actions Hardening #3: Self-Hosted Runners and Audit Log Detection (2026-11-02)