Hijacking Cloud CI/CD Systems for Fun and Profit
divyanshu-mehta.gitbook.io
This research details a new technique that can be used by threat actors for supply chain attacks on open-source repositories using GCP, Azure and AWS.