https://countersign.dev/ Independent configuration teardowns and security advisories. en https://countersign.dev/teardowns/sample-teardown/Five findings, two of them load-bearing: a yanked, unpinned action that a general LLM will wave through, and a secret referenced three ways that will break a 3am deploy on the next rotation. Thu, 04 Jun 2026 17:00:00 -0700 Paul Julius https://countersign.dev/teardowns/sample-teardown/ https://countersign.dev/advisories/actions-checkout-pin-drift/Moving GitHub Actions tags remain convenient, but they keep supply-chain authority outside your repository. Pin critical workflow actions to full commit SHAs and record the human-readable version beside the pin. Mon, 08 Jun 2026 17:00:00 -0700 Paul Julius https://countersign.dev/advisories/actions-checkout-pin-drift/