buildConfirmed2 publishers GhostAction attackers used roughly 1,900 hijacked GitHub accounts to plant credential-stealing workflows in over 30,000 repos. No GitHub Actions flaw was involved, so defence means rotating exposed keys and reviewing who edits workflows.
Perspective Coverage
3 publishers
- Builder
- Builder 38%
- Operator
- Operator 52%
- Investor
- Investor 10%
Reality
- Evidence70
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence72
buildOne report1 publisher Once a workflow has an actions.lock entry, a moved tag no longer changes what GitHub Actions runs
GitHub's Actions lockfile, in public preview since October 2026, pins each action in a workflow to a commit SHA, DEV Community reports. A pinned commit that vanishes fails the run, so teams trade silent drift for hard errors.
Reality
- Evidence30
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence35
buildOne report1 publisher GitHub's Evergreen app revokes outside collaborator access when a quarterly review goes unanswered
GitHub built Evergreen, an app that revokes outside collaborators' access when nobody answers a quarterly review. GitHub says orgs that share repos with customers can adapt it. It runs on stock GitHub features and a small Go server.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+10
- Incentives35
- Confidence60
buildOne report1 publisher A moved tag can no longer change what an onboarded GitHub Actions workflow runs
GitHub put workflow lockfiles in public preview, so onboarded Actions runs use the commits recorded in actions.lock even if a tag or branch moves. The lock does not assess whether the action is safe; that review stays with the team.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap−10
- Incentives
- Not scored
- Confidence50
buildOne report1 publisher GitHub has deployed 120 of 160 services in Central US but moved only 13 of 51 primary MySQL databases
GitHub missed its September 30 goal to deploy every production service in Central US, with 120 of 160 there by October 7. Primary MySQL databases are further behind: 13 of 51 had moved, according to GitHub's availability report.
Reality
- Evidence62
- Adoption58
- Hype gap−10
- Incentives
- Not scored
- Confidence60
buildOne report1 publisher GhostAction's October workflow ran where September's mostly stalled, Socket reports
Two compromised maintainer accounts pushed a GhostAction workflow into 346 GitHub repositories on Oct. 8, according to Socket's research team. GitGuardian, which named the campaign, is still reviewing the wave against its own data.
Publishers:blog.gitguardian.com · dev.to Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+8
- Incentives
- Not scored
- Confidence60
buildOne report1 publisher A one-commit checkout and a trailing || true let 41 PRs skip tests under green CI
GitHub Actions' default one-commit checkout let 41 pull requests skip their tests over three weeks while CI stayed green, a dev.to author reports. The author's change-detection step read git's fatal error as an empty diff, and the run that exposed it showed a test job that finished in 4 seconds.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+6
- Incentives
- Not scored
- Confidence60
buildOne report1 publisher A Docker Hub account conversion let one user's access token act as another user
Docker says it fixed a Docker Hub token flaw about four hours after an outside researcher reported it on September 30. Teams that publish from CI should check whether Docker flagged their tokens and whether their published images still match their builds.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap
- Not scored
- Incentives25
- Confidence55
buildOne report1 publisher A pull_request_target trigger let any forked PR run code in DuckDuckGo's CI with secrets in reach
A HackerOne report says DuckDuckGo's semver-label.yml ran code from any forked pull request with secrets in its environment. Any team can search its own workflows for pull_request_target to find the same pattern.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+35
- Incentives
- Not scored
- Confidence50
GhostAction's credential-stealing GitHub workflow has reached tens of thousands of repositories through more than 500 accounts since October 7, Socket says. Any repository carrying the file should be treated as having lost its Actions secrets and every key in its git history.
Reality
- Evidence58
- Adoption70
- Hype gap+8
- Incentives
- Not scored
- Confidence62
buildOne report1 publisher Azure Pipelines' new GitHub-hosted Agents pool prices each job per minute by the image label in its YAML
Microsoft made GitHub-hosted agents generally available in Azure Pipelines, billed per minute at a rate the YAML image label sets, with no free minutes. Anyone with write access to a pipeline can now change what its jobs cost.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap0
- Incentives
- Not scored
- Confidence55
GitHub rebuilds Git hosting on Azure Blob Storage after commits grow fivefold
GitHub is moving Git onto Azure Blob Storage and separate compute workers after September commits hit 7.38 billion, over five times a year earlier. The rebuild eases GitHub's capacity problem, but the CI runs and reviews each agent push sets off stay with customer teams.
Reality
- Evidence50
- Adoption15
- Hype gap+25
- Incentives55
- Confidence55
buildOne report1 publisher Rust's Miri fix leaves CI secrets sitting in GitHub Actions caches built before it
Rust's nightly of 22 September 2026 stops Miri copying environment variables into the target/ directories CI jobs cache. Caches saved earlier still hold any secret a Miri step saw, so teams have to delete them and rotate those credentials.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence55
buildOne report1 publisher GitHub is rebuilding its Git storage around the write load agents create
GitHub is rebuilding its Git storage infrastructure as monthly pushes grew 4.9x in a year to 3.35 billion. The strain is on writes, since every push must be durable and consistent before the next agent or CI job can build on it.
Reality
- Evidence45
- Adoption50
- Hype gap+25
- Incentives60
- Confidence55
Coinbase cuts its 90-case support bot test from up to two weeks to under an hour
Coinbase says its Autopilot system now runs about 90 support-bot test cases in 30 to 45 minutes, work that took one to two weeks by hand. A person still approves each procedure release, so the faster cycle gives Coinbase more checks per reviewer while its effect on customers and staffing costs stays unmeasured.
Reality
- Evidence40
- Adoption25
- Hype gap+10
- Incentives60
- Confidence45
buildOne report1 publisher Scanner authors find six exploitable GitHub workflows among 60 that use pull_request_target
Scanner authors writing on dev.to hand-checked 60 public pull_request_target workflows and judged 6 exploitable by anyone who can open a pull request. About as many looked dangerous and were safe, so an audit has to read what runs after the checkout.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+5
- Incentives60
- Confidence40
Claude Statuspane makes agent spend visible to one developer at a time
Anji Xu's open-source Claude Statuspane puts context use, five-hour and seven-day rate limits and session cost in a card above the Claude Code prompt. The readout lives on that one developer's screen, so whoever answers for a team's total agent spend still needs records kept somewhere central.
Reality
- Evidence45
- Adoption5
- Hype gap0
- Incentives
- Not scored
- Confidence50
buildOne report1 publisher Coding agents have made CI the bottleneck at Anthropic and Linear
Anthropic's CI job volume grew 25x in six months as coding agents raised pipeline load, The New Stack reports. Faster runners and test selection cut the cost of each run, yet repo tests still mock the service seams where distributed systems break.
Reality
- Evidence45
- Adoption60
- Hype gap+20
- Incentives50
- Confidence45
buildOne report1 publisher A static denylist stopped one more prompt injection than no protection in a coding-agent study
Bouras, Dai and Mechtaev found a static denylist let 46 of 75 prompt injections execute in a coding agent, against 3 under preflight-scoped capabilities. A same-day Google report of malware stealing OIDC tokens from GitHub Actions runners puts the outer limit on an agent in the CI job's permissions.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence50
buildOne report1 publisher Go 1.27 executes a poisoned dependency at go test in a replay of npm's August 4 worm
Go 1.27 ran none of a poisoned module's code on go get, go build or go vet in a replay of npm's August 4 worm, but go test ran it with GITHUB_TOKEN in reach. Go teams still carry exposure through CI test runs, versions that stay cached for good, and bots that edit go.mod.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence55
Earlier coverage
- Two actions-cool GitHub Actions resumed running the Mini Shai-Hulud stealer after coming back online
Security · September 25, 2026 · Confirmed2 publishers
- An AI commit deleted a Snowflake workflow's injection guard. An agent walked in five days later.
Build · August 17, 2026 · Confirmed2 publishers
- A Copilot Autofix Wrote the Bug, and an Autonomous Agent Cashed It for Snowflake's Jira
Security · August 17, 2026 · Confirmed4 publishers
- Cursor becomes a code host by default, and GitHub's seven outages in 15 days is the opening
Product · August 17, 2026 · Confirmed4 publishers
- 659 live Stripe keys and 35GB of payment data for sale: scanning is now a fraud control
Security · August 19, 2026 · Confirmed2 publishers
- GitHub's autoscaler watched the wrong meter, and auth, CI and Copilot fell together
Build · August 20, 2026 · Confirmed3 publishers
- Explaining Buildkite's incident takes the node vocabulary Kubernetes hides from service owners
Build · September 20, 2026 · Confirmed2 publishers
- A pushed commit pulled MemTensor's npm and PyPI publish tokens out of its own release workflow
Security · September 23, 2026 · Confirmed2 publishers
- GitHub will meter every Copilot plan by token consumption from June 1
Science · September 23, 2026 · Confirmed2 publishers