
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
xorkeesign India G2C
xorkeesign-india-g2c
Digitally sign tax and other returns in government of India citizen-facing web applications.
xorkeesign is a digital signature enabling service from Odyssey Technologies Ltd.
xorkeesign runs on the versatile xorkee infrastructure that is a superset of PKI.
This extension is a specialized interface to some of the services of xorkeesign that cater to Indian residents to file their Income Tax and GST returns and other documents with Government of India portals.
The extension stays dormant when the browser is used to access any site other than the targeted Government of India citizen portals. In the targeted portals the extension collects one or more Government issued IDs (eg. PAN) and connects to the xorkeesign service.
The signature on the data sent to xorkeesign is obtained from the user and returned to the extension for onward submission to the Government portal. Both the ID (PAN) and the data are sent to xorkeesign only as cryptographic digests. Raw data is never sent.
The extension does not collect or store any other data than described above.
Using this extension you can:
FAQs
Digitally sign tax and other returns in government of India citizen-facing web applications.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.