Leaking Secrets From GitHub Actions: Reading Files And Environment Variables, Intercepting Network/Process Communication, Dumping Memory

Documenting the inner-workings of the GitHub Actions runner, and exploring various ways of leaking secrets from vulnerable workflows.