Turning Almost Nothing into a Supply Chain Compromise of Angular with GitHub Actions Cache Poisoning
adnanthekhan
githubactions
The Sovereign Publisher: How I Automated My Content Pipeline with GitHub Actions
Adam’s Rambling Blog
Building a technical audience is a marathon, but the “grind” of manually cross-posting content across platforms is a sprint that nobody wants to run every week. As a senior engineer, I want to spend my time architecting systems, not fighting web editors. Today, I finished building the Sovereign...
Clinejection — Compromising Cline's Production Releases just by Prompting an Issue Triager
adnanthekhan
(Not So) Safe{Wallet}: GitHub Actions Risks Impacting Safe''s Frontend
adnanthekhan
Cacheract: The Monster in your Build Cache
adnanthekhan
In this post, I demonstrate Cacheract, which is an open source proof-of-concept for 'Cache Native Malware' that exploits GitHub Actions cache misconfigurations.
Release-Drafter To google/accompanist Compromise: VRP Writeup
adnanthekhan
BlackHat 2024 and DEF CON 32 Preview
adnanthekhan
RoguePuppet - A Critical Puppet Forge Supply Chain Vulnerability
adnanthekhan