20A stranger opens a pull request from their fork. What can that PR execute in your pipeline, and where does pull_request_target go wrong?▼hard★ EssentialNewCloudflareGitLabStripe○ sign inPublic fork PRs normally get a read-only token and no repository secrets. Privileged triggers, runner access and untrusted shell input can break that boundary.Open full answer →
40A coding agent runs in CI and reads pull request descriptions. An attacker opens a PR. What is the attack, and what stops it?▼expertNewGitHubGitLabCloudflare2 replies◆ premiumUntrusted text reaching a privileged agent is the whole vulnerability. It is the pull_request_target mistake again, with a model in the middle that will follow instructions it finds in the data.Open full answer →
