Skip to content
AppSec PodcastThe Application Security Podcast — home
← All advice
practitionerThreat Modeling

Expose pipeline secrets only when needed

Said by François Proulx ·

“Like as you said, like you want to only keep the secrets to the part that you absolutely need it.”

Transcript evidence from François Proulx - Arbitrary Code Execution 0-day in Build Pipeline of Popular Open Source Packages.

Episode notes