Research Publications
GitHub Repository Artifacts Leak Tokens
Analysis of how GitHub repository artifacts can inadvertently leak sensitive tokens and credentials, exposing organizations to security risks.
Read More β
tj-actions GitHub Action Supply Chain Attack
In-depth research on supply chain vulnerabilities in GitHub Actions workflows and how attackers can exploit CI/CD pipelines.
Read More β
Unpinnable Actions GitHub Security
Investigation into GitHub Actions that cannot be pinned to specific versions, creating potential security vulnerabilities.
Read More β
GitHub Actions Opt-Out Permissions Model
Analysis of GitHub Actions permission models and the security implications of opt-out vs opt-in approaches.
Read More β
Prevent Inadequate IAM GitHub Organization
Best practices and recommendations for securing GitHub organizations through proper Identity and Access Management.
Read More β
A New Security Breach in GitHub Actions Threatens Software Giants
GeekTime coverage (Hebrew) of the ArtiPACKED vulnerability research, highlighting how this attack vector affects major companies like Canonical, Google, AWS, and Microsoft.
Read Article β
