Poisoned Pipeline Execution

Named by 4 kept items in this workspace.

3 items name it under techniques and 1 under classification.key entities.

Search every workspace for Poisoned Pipeline Execution. It matches the name as written, so it can find other things that share it.

The items that name it 4

https://github.com/praetorian-inc/gato
toolas techniques2026-10-02
Enumeration and exploitation of pipeline vulnerabilities within a GitHub organization's public and private repositories via workflow file analysis and run-log analysis to identify potentially vulnerable repositories at scale.
Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure
articleas techniques2026-09-24It is written here as Poisoned Pipeline Execution (PPE).
Attack using unvetted pull request code to reach secrets or deployment runners.
AI Agent Hacking Writeups
repoas techniques2026-09-17It is written here as Poisoned Pipeline Execution (CI/CD secret exfiltration).
CI/CD secret exfiltration
Megalodon: Mass GitHub Actions Secret Exfiltration Across 5,500+ Public Repositories - StepSecurity
writeupas classification.key entities

All techniques in this workspace.