writeups.xyz / The Monsters in Your Build Cache – GitHub Actions Cache Poisoning

Submitter : c2a

Date: 6 May 2024

Bounty : 1,000

Vulnerabilities :

• CI/CD
• Supply Chain Attack

Programs :

• Google

Authors :

• Adnan Khan (@Adnanthekhan)

Link :
https://adnanthekhan.com/2024/05/06/the-monsters-in-your-build-cache-github-actions-cache-poisoning/