Open korniko98 opened 8 months ago
A misconfiguration in one of GitHub's own repos could have (theoretically) allowed an attacker to modify the official GitHub and Azure Pipelines runner images.
https://adnanthekhan.com/2023/12/20/one-supply-chain-attack-to-rule-them-all/
Summary (give a brief description of the issue)
A misconfiguration in one of GitHub's own repos could have (theoretically) allowed an attacker to modify the official GitHub and Azure Pipelines runner images.
References (provide links to blogposts, etc.)
https://adnanthekhan.com/2023/12/20/one-supply-chain-attack-to-rule-them-all/