JSTGTECH
← All posts

Tagged “cicd”

2 posts

CI/CD for a static site: build, sync, and invalidate

How to structure a GitHub Actions pipeline that builds a static site, syncs it to S3 with correct cache headers, and invalidates CloudFront without overpaying.

awss3cloudfrontcicdtutorial

CVE-2025-30066: The GitHub Action Tag You Trusted Lied

A compromised maintainer token let attackers rewrite tj-actions/changed-files version tags, dumping CI/CD secrets from thousands of repos into public build logs.

securitycicdsupplychaingithub