GitHub Actions 2026 Security Roadmap — Hardening CI/CD Against Supply Chain Attacks

GitHub's 2026 Actions security roadmap answers real attacks like tj-actions/changed-files. What's actually coming — dependency locking, scoped secrets, runner egress firewall — plus hardening you can apply this week.