Submissions from adnanthekhan.com

		Who's SHA Is It Anyway: Bypassing Google Cloud Build Comment Control for $30k (adnanthekhan.com)
		3 points by nstart 6 months ago \| past
		Cacheract: The Monster in Your Build Cache (adnanthekhan.com)
		3 points by eatox on Jan 9, 2025 \| past
		RoguePuppet – A Critical Puppet Forge Supply Chain Vulnerability (adnanthekhan.com)
		1 point by pabs3 on Nov 8, 2024 \| past
		An Obscure Actions Workflow Vulnerability in Google's Flank (adnanthekhan.com)
		20 points by varunsharma07 on April 16, 2024 \| past \| 1 comment
		One Supply Chain Attack to Rule Them All (adnanthekhan.com)
		1 point by akyuu on Jan 14, 2024 \| past