Tag

github-webhook

Safeguard articles tagged "github-webhook" — guides, analysis, and best practices for software supply chain and application security.

1 article

Open Source Security

Packagist's GitHub Webhook Flaw That Could Have Poisoned ...

A 2022 Packagist webhook vulnerability let a crafted GitHub branch name trigger command injection on Packagist's servers, threatening the entire PHP/Composer supply chain.

Nov 30, 20256 min read