cicd githubactions cache-poisoning
#cicd
14 posts with this tag.
cicd ai github
Copilot or Coconspirator - Tricking GitHub Copilot and Stealing all Your Secrets
cicd bugbounty
Who's SHA is it Anyway: Bypassing Google Cloud Build Comment Control for $30,000
bugbounty cicd github
Watch your Dispatch: Race Condition in Dependabot Core CI
cicd githubactions security
(Not So) Safe{Wallet}: GitHub Actions Risks Impacting Safe''s Frontend
cicd githubactions security
Cacheract: The Monster in your Build Cache
In this post, I demonstrate Cacheract, which is an open source proof-of-concept for 'Cache Native Malware' that exploits GitHub Actions cache misconfigurations.
bugbounty cicd githubactions
Release-Drafter To google/accompanist Compromise: VRP Writeup
cicd githubactions security
RoguePuppet - A Critical Puppet Forge Supply Chain Vulnerability
bugbounty cicd github
The Monsters in Your Build Cache - GitHub Actions Cache Poisoning
bugbounty cicd github
An Obscure Actions Workflow Vulnerability in Google's Flank
bugbounty cicd github
Web3''s Achilles'' Heel: A Supply Chain Attack on Astar Network
cicd github security
CVE-2023-49291 and More - A Potential Actions Nightmare
bugbounty cicd github
One Supply Chain Attack to Rule Them All - Poisoning GitHub's Runner Images
bugbounty cicd security