<![CDATA[my job?]]>my job? wasting an absolutely ungodly amount of GitHub's free compute

Link Preview Image
]]>https://board.circlewithadot.net/topic/8bd8d26b-9da4-4932-8458-f6cc761ab464/my-jobRSS for NodeFri, 17 Apr 2026 12:00:39 GMTTue, 07 Apr 2026 17:47:34 GMT60<![CDATA[Reply to my job? on Tue, 07 Apr 2026 18:22:14 GMT]]>@caspicat I actually hadn't seen this, but I'm not sure how it makes GH's own runners untrustworthy? it's definitely a (bad) operational error, but AFAICT it doesn't change the platform's security posture significantly

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/yossarian/statuses/116364812880651568https://board.circlewithadot.net/post/https://infosec.exchange/users/yossarian/statuses/116364812880651568Tue, 07 Apr 2026 18:22:14 GMT<![CDATA[Reply to my job? on Tue, 07 Apr 2026 17:58:10 GMT]]>@yossarian btw have you seen this? Old news, but not sure if this was widely discussed. TL;DR You can't trust GitHub runner images

Link Preview Image
How StepSecurity Harden Runner Detected Unexpected Microsoft Defender Installation on GitHub-hosted Ubuntu Runners - StepSecurity

Microsoft Defender was unexpectedly installed on multiple workflow runs from mid-July through mid-August, causing abnormal network traffic. StepSecurity Harden Runner detected this infrastructure anomaly within hours, and GitHub Support has since resolved the issue

favicon

(www.stepsecurity.io)

No SBOMs released for affected images during that window
https://github.com/actions/runner-images/releases

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/caspicat/statuses/116364718275140204https://board.circlewithadot.net/post/https://infosec.exchange/users/caspicat/statuses/116364718275140204Tue, 07 Apr 2026 17:58:10 GMT<![CDATA[Reply to my job? on Tue, 07 Apr 2026 17:48:24 GMT]]>my list got cut off

Link Preview Image
]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/yossarian/statuses/116364679903974123https://board.circlewithadot.net/post/https://infosec.exchange/users/yossarian/statuses/116364679903974123Tue, 07 Apr 2026 17:48:24 GMT