Not Just a Pipeline Leak: Reconstructing Real Attack Behind tj-actions
Reconstructs the multi-stage CI/CD supply chain compromise of the popular tj-actions GitHub Action, detailing secret exfiltration and attacker tradecraft.
Summary
The Attack Surface of CI/CD Pipelines
Modern software development relies on GitHub Actions and automated CI/CD workflows, where third-party actions execute with access to repository secrets, cloud credentials, and release tokens.
Reconstructing the tj-actions Compromise
Aviad Hahami provides a detailed forensic reconstruction of the real-world supply chain attack targeting the widely used tj-actions/changed-files action.
Secret Harvesting and Malicious Pull Request Injection
Adversaries weaponized subtle pull request workflow triggers and repository permissions to inject malicious payloads, exfiltrating GitHub tokens and AWS credentials from thousands of downstream organizations.
Hardening Enterprise CI/CD Pipelines
Protecting build infrastructure requires pinning actions to immutable commit SHAs, enforcing least-privilege token permissions, and monitoring runner execution logs for unauthorized outbound connections.
Related talks
Main Stage·44 min
Adnan Khan · John Stawinski
Exploiting insecure defaults in self-hosted GitHub Actions runners to compromise repositories, cloud environments, and internal networks.
Main Stage·40 min
Asi Greenholts
Asi Greenholts demonstrates a proof-of-concept worm propagating through the GitHub Actions ecosystem by compromising interdependent custom actions.
App Sec Village·26 min
Elad Pticha · Oreen Livni
Demonstrates a command injection vulnerability in the Bazel GitHub Action that allowed malicious tampering in Google's build pipeline.