Linux Foundation Decentralized Trust · Report #2410111
Docker Secret Disclosure via GitHub Actions Cache Poisoning
Validstatus
highseverity
56upvotes
20 Apr 2024disclosed
Summary
An issue was reported whereby GitHub secrets were leaked via GitHub Actions. We worked with the reporter to resolve this issue, and it appears widespread.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.