GitHub Actions Script Injection: What the Snowflake Case Actually Shows
Untrusted issue text became shell code in Snowflake's GitHub Actions workflow. The injection path was conventional even though an autonomous agent found and adapted it.
Tag
1articlewith this tag.
Untrusted issue text became shell code in Snowflake's GitHub Actions workflow. The injection path was conventional even though an autonomous agent found and adapted it.