GitHub Actions

CI/CD Pipeline Attacks and Supply-Chain Risk

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...

Containers & DevSecOps

Attacking CI/CD Pipelines: Exploiting GitHub Actions and Jenkins

A practical offensive and defensive walkthrough of pwn requests, PPE, secrets exfiltration, and OIDC abuse in GitHub Actions and Jenkins.

Containers & DevSecOps