llvm-iwg
llvm-iwg copied to clipboard
Security: Figure out what an attacker could do with a github runner token
Released to the discussion on using github actions #66 :
- Assuming an attacker could extract the Github runner token, what could they do with that?
- What's the worst that could happen?