https://digital-business.blog/2026/07/10/third-party-actions-pinnen-warum-sha-statt-tag-und-was-eine-allowlist-bringt/Dein Blog zum Thema digitales Businessde2026-07-10T06:50:27+00:00Third-Party Actions pinnen: warum SHA statt Tag und was eine Allowlist bringtCI/CD, GitHub Actions, Supply Chain Security, Dependabot, SHA-Pinninghttps://digital-business.blog/2026/07/09/runner-sicherheit-warum-self-hosted-runner-ein-eigenes-risiko-sind/Dein Blog zum Thema digitales Businessde2026-07-09T06:26:20+00:00Runner-Sicherheit: Warum Self-hosted Runner ein eigenes Risiko sindGitHub Actions, GitSecOps, Self-hosted Runner, CI/CD-Sicherheit