Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs
An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then download before deleting the runs. This campaign highlights a significant vulnerability in how secrets are managed and exposed within CI/CD pipelines, particularly affecting private repositories and GitHub Enterprise environments.
https://meta-news.in…
An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then download before deleting the runs. This campaign highlights a significant vulnerability in how secrets are managed and exposed within CI/CD pipelines, particularly affecting private repositories and GitHub Enterprise environments.
https://meta-news.in…