6
Misconfigured GH Actions hijack - Low Level - YouTube (www.youtube.com)
submitted 4 months ago by to c/programming@programming.dev
1 comment fedilink hide all child comments
 

Never heard of pull_request_target before today and I think I'm with him, I don't know what I would possibly use it for that would justify the risk of unreviewed code getting access to build environments. Seems bananas.

1 comment

sorted by: hot top controversial new old
[–] 2 points 4 months ago

It was bound to happen, as github actions are mess.
Im just happy that AI bros got hit this time, instead of something important.

  • permalink
  • fedilink
  • source
    •