Pwning the CI with GitHub Action Workflows - Security Challenges and Exploits
CNCF [Cloud Native Computing Foundation] via YouTube
Live Online Classes in Design, Coding & AI — Small Classes, Free Retakes
The Most Addictive Python and SQL Courses
Overview
Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This talk demonstrates how social engineering, insecure GitHub configuration, and unsafe GitHub Actions workflows can expose development pipelines and the software supply chain to attack.
Syllabus
Pwning the CI (with GitHub Action Workflows) - Stephen Giguere, Bridgecrew
Taught by
CNCF [Cloud Native Computing Foundation]