GitHub Actions will hold potentially malicious workflows until a collaborator with write access approves them.
GitHub now automatically holds suspicious Actions workflows in public repositories, but maintainers must still review ...
Many open-source repositories contain privileged GitHub Actions workflows that execute untrusted code and can be triggered by attackers to expose credentials and access tokens, as MITRE and Splunk ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results