GitHub Webhook Secret Exposure (GH-9951654-7992-a1)
GitHub accidentally included webhook secrets in HTTP headers between September 2025 and January 2026. Here's what happened, who's affected, and what you need to do about it.
GitHub accidentally included webhook secrets in HTTP headers between September 2025 and January 2026. Here's what happened, who's affected, and what you need to do about it.
One-liner to bulk-delete all GitHub Actions artifacts using the GitHub CLI. No third-party actions needed — works from the terminal or directly inside a workflow for automated nightly cleanup.