writeups.xyz / Vulnerable GitHub Actions Workflows Part 2: Actions That Open the Door to CI/CD Pipeline Attacks

Submitter : c2a

Date: 2 May 2022

Bounty : undisclosed

Vulnerabilities :

• Privilege Escalation
• CI/CD

Programs :

• Undisclosed

Authors :

• Noam Dotan

Link :
https://www.legitsecurity.com/blog/github-actions-that-open-the-door-to-cicd-pipeline-attacks