Karim Rahal
  • About

Leaking Secrets From GitHub Actions: Reading Files And Environment Variables, Intercepting Network/Process Communication, Dumping Memory

Documenting the inner-workings of the GitHub Actions runner, and exploring various ways of leaking secrets from vulnerable workflows.

05 Jan 2023