Top all-time · #20507
Julien Renaux
Personal blog · julienrenaux.frprogrammingweb
Julien Renaux's personal blog at julienrenaux.fr covers programming and web. Since 2014, 3 different Hacker News readers have linked it 4 times, most often “Use GitHub actions at your own risk”. It is still writing: the last post was on 2026-09-29, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN readers link this blog for a post on GitHub Actions security, which argues that branch and tag references are mutable and that commit hashes should be used instead. The comment cites it as background for a tool.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Julien Renaux, AI-augmented software engineer with 15 years building scalable web apps across four continents. Ex-eBay and Rakuten, now freelancing via Toptal.
Most-linked posts?
- Use GitHub actions at your own risk2 people · 2 mentions · first linked 2019-12-20
What Hacker News says?
I recently read https://julienrenaux.fr/2019/12/20/github-actions-security-r... which reminds us that depending on external GitHub Actions is risky as branch and tag refs are mutable > Using GitHub actions with branch names or tags is unsafe. Use commit hash instead. Instead of updating to use a SHA everywhere, I wrote a tool to do it for you, making a note of the original version (e.g. @master). This allows you to…
Comment linking /2019/12/20/github-actions-security-risk/
on “Show HN: Improve the security of your GitHub Actions in one command”Submitted Use GitHub actions at your own risk as a story · 168 points
HN discussionSubmitted Ionic Framework features you may have missed as a story · 2 points
HN discussionSubmitted Lit Element rendering strategies explained as a story · 1 points
HN discussion