4 ms·
What actually happened: The workflow was configured in a way that allowed untrusted code from a branch controlled by the attacker to be executed in the context
by codesparkle 10mo ago
What actually happened:
The workflow was configured in a way that allowed untrusted code from a branch controlled by the attacker to be executed in the context of a GitHub action workflow that had access to secrets.