# Risky Business #837 -- GitHub Actions footgun claims TanStack Page: https://stenobird.com/podcast/risky-business-548735/risky-business-837-github-actions-footgun-claims-tanstack Text version: https://stenobird.com/podcast/risky-business-548735/risky-business-837-github-actions-footgun-claims-tanstack.md Podcast: [Risky Business](https://stenobird.com/podcast/risky-business-548735) Published: 2026-05-13T05:08:48+00:00 Episode link: https://risky.biz/RB837/ Audio file: https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RB837.mp3 Processing state: not_requested JSON: https://stenobird.com/v1/public/podcasts/risky-business-548735/episodes/risky-business-837-github-actions-footgun-claims-tanstack Duration seconds: 3915 ## Resource On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover: Mini Shai-Hulud and the TanStack compromise using Github Actions Instructure pays Canvas elearning platform data extortionists More Linux privilege escalation 0days! CISA helping critical infrastructure operators rearchitect their networks so they work offline This week’s episode is sponsored by email security platform Sublime Security. Bobby Filar chats with Patrick about how agentic AI is being evaluated by buyers in a marketplace that’s experiencing “AI fatigue”. This episode is also available on Youtube. ## Actions - request_transcript: `POST https://stenobird.com/v1/public/podcasts/risky-business-548735/episodes/risky-business-837-github-actions-footgun-claims-tanstack/transcription-requests` — Idempotently request low-priority transcript generation for this episode. - read_markdown: `GET https://stenobird.com/podcast/risky-business-548735/risky-business-837-github-actions-footgun-claims-tanstack.md` — Read the agent-friendly Markdown representation of this episode resource. A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed. ## Transcript Full transcripts are not published on public pages unless there is a clear rights basis.