GitHub has rolled out significant updates to npm and GitHub Actions aimed at bolstering supply chain security. These changes are designed to disrupt common attack techniques and minimize the potential impact of such vulnerabilities.
Source: GitHub Blog