Get the latest tech news
Working as unexpected
Don't let the unexpected derail your projects. Read our guide on embracing uncertainty in software development and unlock new possibilities. Everything you need to know about securing the software supply chain.
-- CODE language-bash -- on: push: branches: name: example secret exfiltration jobs: build: runs-on: ubuntu-latest environment: mattmoor-testing steps: - shell: bash run: | echo ${{ secrets.NOT_A_SECRET }} | base64 In fact, the main feature that previously allowed me as a maintainer to sleep at night with a non-trivial number of repo editors was ironically … (drumroll) ... branch protections. As I mentioned earlier, GitHub marked this issue as working as intended, but (silver linings) it freed me to at least help educate you all to be on the lookout for vulnerable behaviors like this.
Or read this on Hacker News