Common Ground·19 min
Yaron Avital
Shows how leaked GitHub Actions tokens in public build artifacts can be stolen in a race before they expire.
supplybuildopen-source+2
Yaron Avital
2 talks in the archive.
Filters+
1–2 of 2 talks
Ground Floor·23 min
Yaron Avital
Examines how permissive GitHub Actions tokens and unpinnable third-party actions expose CI pipelines to compromise.
supply-chainbuildopen-source+2