Security: Figure out what an attacker could do with a github runner token

llvm / llvm-iwg

The LLVM Infrastructure Working Group

Other

17 stars 14 forks source link

Open ChristianKuehnel opened 2 years ago

ChristianKuehnel commented 2 years ago

Released to the discussion on using github actions #66 :

Assuming an attacker could extract the Github runner token, what could they do with that?
What's the worst that could happen?