
GitHub Actions pwn-request fixes still leave checkout gaps
Old actions/checkout SHA pins and triggers such as issue_comment can still run fork code with secrets.
1
1 stories, newest first · one card per story

Old actions/checkout SHA pins and triggers such as issue_comment can still run fork code with secrets.
Today 37 readers · 37 views · 29 reads · all time 158K views