ثغرة في Snowflake GitHub Actions تسمح بحقن الأوامر من خلال مشكلات مصممة

لماذا يهم هذا الخبر؟

تأمين سير العمل.

سياق الخبر

Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake's public snowflakedb/snowflake-connector-net repository that it said could be exploited through a crafted GitHub issue to execute commands in a workflow containing internal Jira credentials. The issue was present in .github/workflows/jira_issue.yml, which ran when a

فتح الخبر الأصلي