Completed
Sample workflow
Class Central Classrooms beta
YouTube videos curated by Class Central.
Classroom Contents
Vulnerabilities and Misconfigurations in GitHub Actions: Security Risks and Mitigations
Automatically move to the next video in the Classroom when playback concludes
- 1 Intro
- 2 What is GitHub Actions (GHA) tl;dr
- 3 Sample workflow
- 4 User Controlled event triggers
- 5 User Controlled Input
- 6 User Controlled Runtime files
- 7 Code Execution Impact
- 8 Supply Chain Exploit - Example
- 9 Supply Chain Exploit - Securing
- 10 AWS OIDC + GitHub Actions
- 11 OIDC Setup in AWS
- 12 OIDC-GHA Setup
- 13 OIDC & GHA Theory
- 14 OIDC & GHA Vulnerability - Example
- 15 OIDC & GHA Vulnerability - Highlights
- 16 Securing your OIDC & GHA
- 17 Conclusion - Securing your GHA
