writeups.xyz / Identifying vulnerabilities in GitHub Actions & AWS OIDC Configurations

Submitter : c2a

Date: 18 April 2023

Bounty : undisclosed

Vulnerabilities :

• CI/CD
• OIDC

Programs :

• AWS

Authors :

• Rojan Rijal (@Uraniumhacker)
• Johnny Nipper (@Ratherbeonline)
• Tanner Emek (@Itscachemoney)

Link :
https://medium.com/tinder/identifying-vulnerabilities-in-github-actions-aws-oidc-configurations-8067c400d5b8