renders

One attack vector Sysdig investigated involved GitHub Actions workflows that trigger on the pull_request_target event. According to Sysdig, the attack vector exposes secrets and a secret GitHub token with write …