Hijacking GitHub runners to compromise the organization
Registering a GitHub runner with the ubuntu-latest tag grants access to jobs originally designated for GitHub-provisioned runners.
- from
- CI/CD Attacks
- added
- 2026-10-10
- likes
- 0
CI/CD Attacks › Techniques > Post Exploitation: “Registering a GitHub runner with the ubuntu-latest tag grants access to jobs originally designated for GitHub-provisioned runners.”