Containers & DevSecOps Attacking CI/CD Pipelines: Exploiting GitHub Actions and Jenkins
A practical offensive and defensive walkthrough of pwn requests, PPE, secrets exfiltration, and OIDC abuse in GitHub Actions and Jenkins.
Offensive Security
