7 ms·
How does this siphon the secrets away? It looks like it just dumps them out to stdout and stops there.
by Everdred2dx 2y ago
How does this siphon the secrets away? It looks like it just dumps them out to stdout and stops there.
- varunsharma07 2y agoYes, just prints to the build log, so the risk is higher for public repos. Lot of public repos have creds printed in their build logs due to this compromised action.