Auditing GitHub Release Workflows After the OVHcloud CLI Supply-Chain Compromise

An audit-focused guide to hardening GitHub release workflows after attackers hijacked five OVHcloud CLI releases to distribute secret-stealing malware.