PhilipTheBucket@ponder.cat to CybersecurityEnglish · 2 days agoGitHub supply chain attack spills secrets from 23K projectsgo.theregister.comexternal-linkmessage-square6fedilinkarrow-up138arrow-down12
arrow-up136arrow-down1external-linkGitHub supply chain attack spills secrets from 23K projectsgo.theregister.comPhilipTheBucket@ponder.cat to CybersecurityEnglish · 2 days agomessage-square6fedilink
minus-squarePhilipTheBucket@ponder.catOPlinkfedilinkEnglisharrow-up12·2 days agoAs I understand it, the exploit was leaking the secrets from the place in the CI pipeline where they were supposed to be, into the public logs.
As I understand it, the exploit was leaking the secrets from the place in the CI pipeline where they were supposed to be, into the public logs.