GitHub’s new Actions security roadmap is a sign that the industry has finally accepted something many defenders have been saying for years: CI/CD is no longer a convenience layer. It is production and identity infrastructure, and it's secret-bearing.
