Sheldan@programming.dev to Programming@programming.dev · 7 days agoMalicious code injection by compromised pull request branch namesgithub.comexternal-linkmessage-square11fedilinkarrow-up14arrow-down10
arrow-up14arrow-down1external-linkMalicious code injection by compromised pull request branch namesgithub.comSheldan@programming.dev to Programming@programming.dev · 7 days agomessage-square11fedilink
minus-squareThinker@lemmy.worldlinkfedilinkarrow-up1·7 days agoDing ding ding! We have a winner! It’s a third-party GitHub Action that is passing the branch name directly to Bash. So to be clear, not GitHub’s fault.
Ding ding ding! We have a winner!
It’s a third-party GitHub Action that is passing the branch name directly to Bash. So to be clear, not GitHub’s fault.