Praetorian Blog company blog
Public secrets exposure leads to supply chain attack on GitHub CodeQL
An exposed GitHub token could have been used to launch a supply chain attack on GitHub CodeQL, resulting in source code exposure and repository tampering of CodeQL users.
- Points
- 297
- HN comments
- 61
- Submissions
- 1
- Cited by
- 0 commenters
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Mar 30, 2025 | Public secrets exposure leads to supply chain attack on GitHub CodeQL by cyberbender | 297 | 61 |
