What the fork? Imposter commits in GitHub Actions and CI/CD
CYBERSECURITY FEATURED ANALYSIS

What the fork? Imposter commits in GitHub Actions and CI/CD

SOURCE

Chainguard: Unchained

DATE

READ

1 min read

Chainguard found a vulnerability in GitHub Actions that bypasses allowed Workflow settings by using commits from forked repositories. Read the report.

Chainguard found a vulnerability in GitHub Actions that bypasses allowed Workflow settings by using commits from forked repositories. Read the report.