BLOG TAG
ghostaction
1 post on this topic. For the full archive, see the security blog. Comparison writes-ups live on Why Puaro and the methodology page.
All posts
Security Insights5 min readSep 29, 2025
The GhostAction Attack: How 3,300+ Secrets Were Stolen from GitHub Repositories
A large-scale campaign abused GitHub Actions to exfiltrate 3,325 secrets from 817 repositories and 327 users. Learn how it worked and how to secure CI/CD pipelines.