Hybrid Cloud Show – Episode 55

Hybrid Cloud Show – Episode 55

From Hybrid Cloud Show by The Late Night Linux Family

May 1, 2026 · 24 min

About this episode

The episode discusses the issues with GitHub Actions and CI/CD in light of a recent supply chain attack.

A recent attack shone a light on some of the problems with GitHub Actions, and CI/CD more generally. As tempting as it might be, going back to shell scripts probably isn’t the answer.   1K+ cloud environments infected following Trivy supply chain attack 2.5 Admins 292: Trivyally Infected             Support us on patreon and get an ad-free RSS feed with early episodes sometimes           Subscribe to the RSS feed .

Topics covered

  • GitHub Actions
  • CI/CD
  • cloud environments
  • supply chain attack
  • security

Keywords

  • GitHub Actions
  • CI/CD
  • Trivy
  • supply chain attack
  • cloud environments
  • security

Mentioned in this episode

Organizations: GitHub Actions, Trivy

More episodes of Hybrid Cloud Show

Explore listener stats, chart rankings, contacts and more on the Hybrid Cloud Show podcast page.