DEF CON 31 - The GitHub Actions Worm - Asi Greenholts

GitHub is the most popular platform to host Open Source projects therefore, the popularity of their CI/CD platform - GitHub Actions is rising, which makes it an attractive target for attackers.

In this talk I’ll show you how an attacker can take advantage of the Custom GitHub Actions ecosystem by infecting one Action to spread malicious code to other Actions and projects by showing you a demo of POC worm.

We will start by exploring the ways in which Actions …

actions attacker attackers con def def con def con 31 ecosystem github github actions host open source platform popular projects rising target worm