🛡️ Security

GitHub Actions

GitHub's built-in automation and CI/CD platform. It runs workflows defined in YAML files under a repository's .github/workflows directory, and those jobs can read the repository's stored secrets and reach the network.

📚 Deep Dive

Learn Article

How a GitHub Actions Workflow Can Reach Every Secret in Your Pipeline

A CI workflow is a privileged insider: it can read your named secrets, any credential on disk, and every secret ever committed to your git history.

intermediate 4 min read

Back to Glossary