Stephen Giguere
where else to find them
no profile links on file
what they talk about
where they keep going back
no series more than once — all 5 in the filters
on a stage with
- Angela Gizzionce
- Matt Johnsononce
who talks about the same things
- Rob Bos8 talks
- Niek Palm3 talks
- Magno Logan12 talks
- Dwayne McDaniel14 talks
- Andrew Nesbitt11 talks
- Sebastian Olsson2 talks
| title | conference | date |
|---|---|---|
| Hacker Traction Through GitHub Actions: Is Your (Open Source) Project Safe? | Global AppSec Lisbon 2024 | 2024-06-24 |
Research identifies concrete attack paths against GitHub Actions: repo jacking lets an attacker recreate moved action repositories because actions download not… | ||
| Is My (Open Source) Project Safe? | KCD New York 2024 | 2024-05-22 |
Scans of 30,000 repos identify 7,000 using GitHub Actions and a followup analysis of those 7,000 shows concrete exploit chains. Techniques demonstrated include… | ||
| Pwning the CI (GitHub Actions Edition) | RSA Conference 2023 | 2023-04-24 |
A malicious workflow file (pwn.yml) is submitted as a PR and — if auto‑approved or run by a first‑time contributor — executes shell commands that echo… | ||
| Tutorial: How to Build a K8s Admission Controller fro... | CloudNativeSecurityCon North America 2023 | 2023-02-01 |
Don't miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from 18 - 21 April, 2023. Learn more at… | ||
| Pwning the CI (with GitHub Action Workflows) | Cloud Native SecurityCon North America 2022 | 2022-10-24 |
A public repo (example: Checkov) accepts a malicious PR that replaces workflows and runs attacker code on self-hosted runners, exfiltrates environment… | ||
| nothing matches | ||