{"schema":"sb.node.v1","id":"sb:e/67af04c11139ae9212d0538e","kind":"entity","label":{"text":"github actions","locale":"en"},"identity":{"anchor":"label:en:github actions","strength":"label"},"asOf":{"knowledgeCutoff":"2026-10-08T17:31:13.825968+00:00","snapshot":"deploy c506539a36b90f04f787169ffbef27d5ecb0e295"},"lens":{"kind":"public"},"build":{"plane":"projected","builtFrom":["entity_graph.slim.json","entity_receipts (deploy asset)","event_graph.json","truth_records (deploy asset)","corroborated_record.json"],"rule":"node-projection.entity@v1"},"standing":{"evidence":{"supporting":29,"separatePublishers":12,"basis":"documents that mention the subject and the outlets that carried them; a mention is evidence the referent is in use, not evidence about any claim"},"admission":{"state":"canonical","reason":"entity graph provenance 'curated'; the node carries no promotion receipt in v1","policy":"EQ-PROMOTION (receipt not carried)"},"disposition":{"state":"served","reason":"public record"},"validity":{"from":"2026-05-13","to":"2026-10-05","basis":"first and last day we saw it mentioned; not the subject's own lifetime"},"measurement":{"state":"partial","blind":["assertion coverage 0.103: about 90% of mentions carry no typed assertion"]}},"dimensions":{"domains":["auto","cybersecurity"],"activeDays":17,"assertions":{}},"up":[],"upNote":"An entity is a root: it is contained by nothing. Pan out by following R.","children":{"count":12,"byKind":{"observation":12},"items":[{"id":"sb:o/6ee40c2222208d09cc7c7917","kind":"observation","label":"SitePoint · 2026-10-02 · Node 20 GitHub Actions Deprecated: How to Migrate Workflows","url":"https://www.sitepoint.com/node-20-github-actions-deprecation-migration-guide/?utm_source=rss"},{"id":"sb:o/ff9a2d26d1d134160531986e","kind":"observation","label":"BleepingComputer · 2026-09-27 · GitHub Actions re-enabled with Mini Shai-Hulud payload still active","url":"https://www.bleepingcomputer.com/news/security/github-actions-re-enabled-with-mini-shai-hulud-payload-still-active/"},{"id":"sb:o/1db73c22f3b248f5d3121cf6","kind":"observation","label":"The Hacker News · 2026-09-26 · Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware","url":"https://thehackernews.com/2026/09/compromised-github-actions-came-back.html"},{"id":"sb:o/78de73d03b82d013cdd6f983","kind":"observation","label":"SitePoint · 2026-09-26 · Automating DevSecOps Static Analysis with GitHub Actions and Agent Skills","url":"https://www.sitepoint.com/automating-devsecops-static-analysis-with-github-actions-and-agent-skills/?utm_source=rss"},{"id":"sb:o/b22bf36a4110eefbc75fbfc5","kind":"observation","label":"SitePoint · 2026-09-23 · Optimizing GitHub Actions for Agent PRs: Speculative Test Slicing and AST Impact Analysis","url":"https://www.sitepoint.com/optimize-github-actions-agent-prs-test-slicing/?utm_source=rss"},{"id":"sb:o/22d639eaddd5e6552051a11e","kind":"observation","label":"SitePoint · 2026-09-20 · Securing AI Pull Requests: Building a Deterministic AST Audit Harness in GitHub Actions","url":"https://www.sitepoint.com/securing-ai-pull-requests-ast-audit-harness-github-actions/?utm_source=rss"},{"id":"sb:o/60dc3d5ae5ab487426bd42bc","kind":"observation","label":"BleepingComputer · 2026-10-05 · Google halts open-source bug bounty program amid AI spam surge","url":"https://www.bleepingcomputer.com/news/google/google-halts-open-source-bug-bounty-program-amid-ai-spam-surge/"},{"id":"sb:o/01d951dd414cf7f98fa778a2","kind":"observation","label":"CryptoSlate · 2026-10-05 · Coinbase says it cut a 90-case AI support test from 1–2 weeks to 30–45 minutes","url":"https://cryptoslate.com/coinbase-ai-support-tests-weeks-minutes/"},{"id":"sb:o/85a0c0948499daf1db3c783e","kind":"observation","label":"Hacker News Top Stories · 2026-10-04 · Turn off Apple Intelligence on macOS 27 and get its disk space back","url":"https://github.com/omlahore/RemoveMacAI"},{"id":"sb:o/dc7e729fc92fa7d63f27717d","kind":"observation","label":"SitePoint · 2026-10-04 · How to Detect Breaking API Changes with TypeScript and OpenAPI","url":"https://www.sitepoint.com/detect-breaking-api-changes-typescript-openapi/?utm_source=rss"}],"cursor":"c1.eyJpZCI6InNiOmUvNjdhZjA0YzExMTM5YWU5MjEyZDA1MzhlIiwibCI6ImNoaWxkcmVuIiwibyI6MTAsImsiOm51bGwsImEiOiIyMDI2LTEwLTA4VDE3OjMxOjEzLjgyNTk2OCswMDowMCJ9","order":"newest first; we keep the 12 newest receipts for this entity. Its other observations are counted in standing.evidence.supporting but are not addressable in v1"},"relations":{"count":11,"byKind":{"claim":1,"co-mentioned":10},"items":[{"id":"sb:p/332b55b68180de78faef315e","kind":"claim","label":"Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware — corroborated","role":"named-in","relationKind":"claim","members":1},{"kind":"relation","label":"co-mentioned with github (29 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/3959491e67678269f0df48d7"},{"kind":"relation","label":"co-mentioned with ai (15 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/2c11860b4b97c2677282c07f"},{"kind":"relation","label":"co-mentioned with node.js (12 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/7c71d9a944f4bac14c306204"},{"kind":"relation","label":"co-mentioned with continue reading (12 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/3766d80ce0d96a29696d4ff8"},{"kind":"relation","label":"co-mentioned with typescript (11 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/487aacf5f0822f93d5d4645a"},{"kind":"relation","label":"co-mentioned with ubuntu (11 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/88b49cb427e6975d77fd61b8"},{"kind":"relation","label":"co-mentioned with python (10 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/f8eba8c08d4b2c949407baf7"},{"kind":"relation","label":"co-mentioned with apis (9 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/efd191b48ba3f5386e6ed50e"},{"kind":"relation","label":"co-mentioned with linux (8 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/9c3d74888d8e5307b1ba292b"}],"cursor":"c1.eyJpZCI6InNiOmUvNjdhZjA0YzExMTM5YWU5MjEyZDA1MzhlIiwibCI6InJlbGF0aW9ucyIsIm8iOjEwLCJrIjpudWxsLCJhIjoiMjAyNi0xMC0wOFQxNzozMToxMy44MjU5NjgrMDA6MDAifQ","order":"situations first, then claims (the subject's own maintained record, then site-wide corroborated clusters; each label ends with its standing), then co-mentions by shared documents, descending. Co-mentions are the ten strongest the entity graph keeps per entity"},"edge":{"state":"continues"},"links":{"rest":"/api/v1/node/e/67af04c11139ae9212d0538e","mcp":"traverse {\"id\":\"sb:e/67af04c11139ae9212d0538e\"}","page":"/entity/github-actions/"},"limits":{"levelsPerCall":1,"pageSize":10,"maxPageSize":50,"membersMax":50,"statement":"One level per call: depth is 1 and only 1, and there is no whole-graph dump. pageSize 1-50 (default 10); a page limit is a cursor, never an edge. Members are listed up to 50. At most 60 traverse calls a minute per caller (runaway-loop protection, not a meter). One knowledge cutoff is served: the deploy's."},"actions":[{"verb":"unfold","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/67af04c11139ae9212d0538e\",\"level\":\"children\"}"},{"verb":"fold","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/67af04c11139ae9212d0538e\"}"},{"verb":"panOut","lit":false,"effect":"read","layer":"cantina","reason":"An entity is a root: it is contained by nothing. Pan out by following R."},{"verb":"follow","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/67af04c11139ae9212d0538e\",\"level\":\"relations\"}"},{"verb":"receipts","lit":false,"effect":"read","layer":"cantina","reason":"receipts are the observations below this node; unfold to reach them"},{"verb":"edge","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/67af04c11139ae9212d0538e\"}"},{"verb":"asOf","lit":false,"effect":"read","layer":"cantina","reason":"v1 serves one knowledge cutoff, this deploy's; walking an earlier cutoff needs retained history (EQ-REPLAY), which v1 does not keep"},{"verb":"switchObserver","lit":false,"effect":"read","layer":"cantina","reason":"the public record is the same for every observer; traversal through a Watch's lens is not served in v1"},{"verb":"readOriginal","lit":false,"effect":"read","layer":"cantina","reason":"no translation is applied on this node; every label is the source's own text"},{"verb":"save","lit":false,"effect":"watch-declaration","layer":"workshop","reason":"saving applies to a configured Watch; configure one around this node first (free), then save it"},{"verb":"deliver","lit":false,"effect":"watch-declaration","layer":"workshop","reason":"delivery applies to a saved Watch"},{"verb":"format","lit":false,"effect":"watch-declaration","layer":"workshop","reason":"output format applies to a saved Watch"},{"verb":"deltaR","lit":false,"effect":"read","layer":"workshop","reason":"Delta R needs a saved Watch with a previous reading"},{"verb":"read","lit":false,"effect":"read","layer":"docking-bay","reason":"one-time Reads are parked until the Commander decides their shape (#938)"}]}