Flaws In GitHub Actions Bypass Code Review Mechanism
-
Attackers Can Push Code To A Protected Branch
Researchers at Cider Security have uncovered a security loophole in GitHub Actions that allows adversaries to bypass the required reviews mechanism and push unreviewed code to a protected branch, allowing it into the pipeline to production.https://www.inforisktoday.co.uk/flaws-in-github-actions-bypass-code-review-mechanism-a-17733
