writeups.xyz / Exploiting misconfigured Google Cloud Service Accounts from GitHub Actions

Submitter : c2a

Date: 2 May 2023

Bounty : undisclosed

Vulnerabilities :

• OIDC
• Cloud
• CI/CD

Programs :

• Undisclosed

Authors :

• Revblock (@Revbl0ck)

Link :
https://www.revblock.dev/exploiting-misconfigured-google-cloud-service-accounts-from-github-actions/