Search results

Security report — possible pull_request_target + checkout-head RCE (please contact privately)

Status: Open.

#263 In step-security/github-actions-goat;

· Raffa-jarrl opened on May 19, 2026

Harden GitHub Actions Workflow - tj-actions-changed-files-incident.yaml

Status: Open.

#251 In step-security/github-actions-goat;

· stepsecurity-int opened on Mar 15, 2025

Harden GitHub Actions Workflow - changed-files-vulnerability-with-hr.yml

Status: Open.

#241 In step-security/github-actions-goat;

· stepsecurity-int opened on Feb 13, 2025

Harden GitHub Actions Workflow - block-dns-exfiltration.yaml

Status: Open.

#240 In step-security/github-actions-goat;

· stepsecurity-int opened on Feb 13, 2025

Harden GitHub Actions Workflow - baseline_checks.yml

Status: Open.

#239 In step-security/github-actions-goat;

· stepsecurity-int opened on Feb 13, 2025

Harden GitHub Actions Workflow - PRTargetWorkflow.yml

Status: Open.

#238 In step-security/github-actions-goat;

· stepsecurity-int opened on Feb 13, 2025

Harden GitHub Actions Workflow - toc-tou.yml

Status: Open.

#237 In step-security/github-actions-goat;

· stepsecurity-int opened on Feb 13, 2025

Harden GitHub Actions Workflow - publish.yml

Status: Open.

#236 In step-security/github-actions-goat;

· stepsecurity-int opened on Feb 13, 2025

Harden GitHub Actions Workflow - changed-files-vulnerability-without-hr.yml

Status: Open.

#235 In step-security/github-actions-goat;

· stepsecurity-int opened on Feb 13, 2025

Add threat related to modification of artifact in storage/ release location

Status: Open.

#80 In step-security/github-actions-goat;

· varunsh-coder opened on Apr 30, 2022

Add a tutorial for secrets in build logs

Status: Open.

#54 In step-security/github-actions-goat;

· varunsh-coder opened on Feb 9, 2022

Investigate checkspelling token leak

incidentpast incident that should be investigatedpast incident that should be investigated

Status: Open.

#34 In step-security/github-actions-goat;

· varunsh-coder opened on Jan 24, 2022