llvm-iwg icon indicating copy to clipboard operation
llvm-iwg copied to clipboard

Security: Figure out what an attacker could do with a github runner token

Open ChristianKuehnel opened this issue 3 years ago • 0 comments

Released to the discussion on using github actions #66 :

  • Assuming an attacker could extract the Github runner token, what could they do with that?
  • What's the worst that could happen?

ChristianKuehnel avatar Oct 26 '21 15:10 ChristianKuehnel