Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

>I am unable to understand how it compromised your account itself from the exploit at trivvy being used in CI/CD as well.

Token in CI could've been way too broad.

 help



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: