CI/CD Workflows Just Leaked Secrets to Untrusted Prompts
Microsoft found Claude Code's GitHub Action exposes runner secrets via the Read tool. Here's the exact attack path and how to lock it down.
#ci-cd
1 post
1 post
Microsoft found Claude Code's GitHub Action exposes runner secrets via the Read tool. Here's the exact attack path and how to lock it down.