GitHub Actions Script Injection: What the Snowflake Case Actually Shows
Untrusted issue text became shell code in Snowflake's GitHub Actions workflow. The injection path was conventional even though an autonomous agent found and adapted it.
Tag
#github-actions
1articlewith this tag.