Worse than SolarWinds: Three Steps to  Hack Blockchains, GitHub, and ML through GitHub Actions
johnstawinski.com
Six months ago, my friend and colleague Adnan Khan started researching a new class of CI/CD attacks. Adnan grasped the significance of these attacks after executing them against GitHub to gain tota…

In retrospect it seems obvious ;)