Securing the Pipeline: Protecting Self-Hosted GitHub Runners

Securing the Pipeline: Protecting Self-Hosted GitHub Runners Adnan Khan Organizations using GitHub Actions with self-hosted runners are at risk of attackers gaining an internal network foothold from the Internet if they compromise one developer’s pe...

Securing the Pipeline: Protecting Self-Hosted GitHub Runners
Adnan Khan

Organizations using GitHub Actions with self-hosted runners are at risk of attackers gaining an internal network foothold from the Internet if they compromise one developer’s personal GitHub access token. Key configuration adjustments can secure these pipelines and limit the damage from a breach.

https://bsidessf2023.sched.com/event/1I0HG/securing-the-pipeline-protecting-self-hosted-github-runners