actions/checkout
AssessTools
A GitHub Actions action used to check out repository code into a workflow runner.
Why it's here
Placed in Assess: 2 article(s) of evidence from 3 source(s), led by security coverage, with 0 in the last 30 days. Confidence 45%.
Evidence (2)
- 7Hacker News·8/6/2026framework_updateGitHub Actions and Pages Degradation Resolved
GitHub reported degraded availability affecting Actions and Pages, including delayed runner recovery, queued jobs, and temporarily interrupted webhook-triggered workflows. The issue has been mitigated and resolved, though some missed events cannot be replayed automatically and may require users to rerun workflows or retrigger actions manually.
- 8GitHub Blog·7/28/2026securityGitHub hardens npm and Actions against supply chain attacks
GitHub says it has rolled out several changes to disrupt common supply chain attack techniques targeting npm and GitHub Actions. The updates include temporary protection for high-impact npm accounts, safer defaults for actions/checkout, workflow trigger controls, and read-only cache access for untrusted Actions runs.