←back to thread

Public secrets exposure leads to supply chain attack on GitHub CodeQL

(www.praetorian.com)
297 points cyberbender | 1 comments | 30 Mar 25 19:54 UTC | HN request time: 0.217s | source
Show context
ryao ◴[30 Mar 25 22:00 UTC] No.43528076[source]▶
I put CodeQL in use in OpenZFS PRs. This is not an issue for OpenZFS. None of our code is secret. :)
replies(2): >>43528995 #>>43529721 #
1. ◴[30 Mar 25 23:44 UTC] No.43528995[source]▶