Search talks

BSides · 2025bsides-lisbonintermediate

[BSL2022] Are your github actions secure?

Luís Fontes

CODE BLUE · 2025code-blue-2025

[CB25]GHARF：GitHub Actions RedTeam Framework

FIRST · 2025first

Breaking the Build: How Attackers Abuse GitHub Actions

FWD CLOUDSEC · 2025fwd-cloudsec-north-america-2025

Not So Secret: The Hidden Risks of GitHub Actions Secrets

DEF CON · 2025DC33

Not Just a Pipeline Leak: Reconstructing Real Attack Behind tj-actions

Aviad Hahami

OWASP · 2025owasp-foundationadvanced

Hacker Traction Through GitHub Actions: Is Your (Open Source) Project Safe?

Stephen Giguere

SEC T · 2025sec-t-2025

SEC-T 0x11: Simon Gerst - Attacking and defending GitHub Actions

LINUX FOUNDATION · 2025the-linux-foundation

Github Actions Security Landscape

Alex Ilgayev · Ronen Slavin

LINUX FOUNDATION · 2025the-linux-foundation

Scaling GitHub Actions To the CNCF

Jeffrey Sica · Cloud Native Computing Foundation

COMMUNITY · 2025videosintermediate

Zombie Workflows And Other GitHub Actions Horror Stories

Paul Gerste

DEF CON · 2024DC32

Your CI/CD Pipeline Is Vulnerable, But It's Not Your Fault

Elad Pticha · Oreen Livni

COMMUNITY · 2024area41advanced

Action Anomalies: A Hackers Guide To Github Actions

Elliot Ward

DEF CON · 2024DC32

Grand Theft Actions: Abusing Self-Hosted GitHub Runners

Adnan Khan · John Stawinski

ROMHACK · 2024romhack

Adnan Khan - The dark side of GitHub Actions

Adnan Khan

FWD CLOUDSEC · 2023fwd-cloudsec

Vulnerabilities and Misconfigurations in GitHub Actions

Rojan Rijal

DEF CON · 2023DC31

The GitHub Actions Worm

Asi Greenholts

OWASP · 2023owasp-global-appsec-dublin

Global AppSec Dublin: GitHub Actions: Vulnerabilities, Attacks, And Counter-Measures

Magno Logan

RSAC · 2023rsa-conference-rsac

Pwning the CI (GitHub Actions Edition)

Presenter: Stephen Giguere

BSides · 2022bsides-portlandadvanced

Breaking Build: Red Teaming CI/CD Pipelines and GitHub Actions [BSidesPDX 2024]

BSides · 2022bsides-tallinnadvanced

2024 - Elliot Ward (Action Anomalies: A hackers guide to Github Actions)

Elliot Ward

COMMUNITY · 2022stackhawk

and FOSSA Webinar: Automating AppSec Testing with GitHub Actions

GitHub Actions

COMMUNITY · 2022stackhawk

Automate WebApp Security Testing using GitHub Actions || TestJS Summit 2022

COMMUNITY · 2022stackhawk

JS Security Testing in GitHub Actions Workshop | Vue.js 2021

STRANGE LOOP · 2022strange-loop-conference

Marieli Wessel: How people really use GitHub Actions

Marieli Wessel