{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreidgn5rz4x5hrmjfkz753szyovfxbmtsd6zrxq5ne36mpd4l3un7zq",
    "uri": "at://did:plc:ghkvexthfanuyq7fb5veq6tw/app.bsky.feed.post/3moxpovtgwoa2"
  },
  "coverImage": {
    "$type": "blob",
    "ref": {
      "$link": "bafkreibf2iq6lgf47x4plxgqgnofeqag5fsz5fsf5ge3zowmw4ffiamuni"
    },
    "mimeType": "image/jpeg",
    "size": 256844
  },
  "path": "/2026/06/github-updates-actionscheckout-to-block.html",
  "publishedAt": "2026-06-23T14:22:03.000Z",
  "site": "https://thehackernews.com",
  "textContent": "GitHub is moving to strengthen software supply chain security by updating \"actions/checkout\" to block pwn request attacks that exploit the risky use of the \"pull_request_target workflow\" trigger to run malicious code with the workflow's full privileges.\n\nEffective June 18, 2026, the latest version of \"actions/checkout,\" the official GitHub action for checking out a repository into the",
  "title": "GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns"
}