Loading…
BSidesSF 2023 has ended
Back To Schedule
Sunday, April 23 • 1:30pm - 2:20pm
Securing the Pipeline: Protecting Self-Hosted GitHub Runners

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Tweet Share
Feedback form is now closed.


Organizations using GitHub Actions with self-hosted runners are at risk of attackers gaining an internal network foothold from the Internet if they compromise one developer’s personal GitHub access token. Key configuration adjustments can secure these pipelines and limit the damage from a breach.
Speakers
AK

Adnan Khan

Praetorian
Adnan is a Lead Security Engineer at Praetorian. He currently works on Praetorian's Red Team conducting complex attacks against large enterprise networks. His current interests have focused on attacks leveraging compromised tokens for SaaS platforms. Before finding a passion for offensive... Read More →

Sunday April 23, 2023 1:30pm - 2:20pm PDT
AMC Theatre 12
  Deep Dive   Presentation