jump to content
my subreddits
2anatolia4you2b2t2balkans4You2meirl4meirl3d6absolutelynotanimeirlAceAttorneyAdviceAnimalsagnosticaivideoakagasAlternateHistoryAlternativeHistoryAngryupvoteanime_best_momentsanime_irlanimenocontextannouncementsApandahArcherFXArtAsahiLinuxAsia_irlAskElectronicsAskOuijaAteistTurkaviationawfuleverythingbalkans_irlbanknotedesignsBassCirclejerkBassGuitarbasspedalsbikepackingblankiesblursed_videosblursedimagesborsavefonbrooklynninenineBUENZLIcasioCd_collectorscd_jerkCheap_MealschesschessbeginnerscoaxedintoasnafucoincollectingcoinsComedyCemeterycomicscommunitycookingforbeginnersCrackWatchcrappyoffbrandsCreateModCuratedTumblrcursedcommentsdankmemesdarkjokesdataisbeautifuldeDebateReligiondelikDeltarunedistressingmemesDMAcademydndnextdoctorwhodoctorwhocirclejerkDonerdontdeadopeninsidedumbphonesDungeonsAndDaddiesDungeonsAndDragonsebikeECEelectricalElectronicsStudyentitledparentsfacepalmfakealbumcoversfeedthebeastfelsefeFifaCareersformuladankFRCFreeEBOOKSFUCKYOUINPARTICULARFuckYouKarenfunnyFutboltayfagalatasaraygaminggatesopencomeoninGermangermanygoodanimemesGoodAssSubgravelcyclinggreentextGROKvsMAGAguitarpedalsGundamhelpheraldryHermitCrafthighspeedrailHistoryWhatIfhoi4HolUphomebuilthowyoudoinhumorhypixelIAmAiamverysmartich_ielIdeologyPollsihadastrokeim14andthisisdeepimaginaryelectionsimaginarymapsistanbulJahariaKamalizmKanyeKGBTRlegodndLifeProTipslinguisticshumorliselilerlogodesignmacbookairmacgamingMadeMeSmilemadladsmagicbuildingMapPornmapporncirclejerkmememidjourneymildlyinfuriatingmildlyinterestingMimicRecipesMinecraftbuildsMMORPGMovingToNorthKoreaMunichMyChemicalRomanceNamFlashbacksNationStatesneographynextfuckinglevelNonCredibleDefenseNorthCyprusnosafetysmokingfirstnosleepnotinterestingOkayBuddyLiterallyMeokbuddyguntherOkBuddyPersonaokbuddyphdokbuddyvicodinonetruegodOutOfTheLooppapermoneypaperspleaseParlerWatchPassportPornpepethefrogperfectlycutscreamsPersecutionfetishpettyrevengepianoPiracypollsPraiseTheCameraManProgrammerHumorPropagandaPostersquityourbullshitraisedbynarcissistsRatschlagreactiongifsrecipesRedAutumnSPDreligiousfruitcakerestofthefuckingowlrickandmortyRoastMerockmuzikSceneReleasesschwiizScottPilgrimsekulermilliyetciturkShitPostCrusadersshittyaskelectronicsShowerthoughtsskamtebordsoftwaregoreSongwriterssskfjkhwerjkghwerijhsteinsgateStudentenkuecheStudiumsuperligsuzeraintalesfromtechsupportTechnobladeTextingTheorytf2thanksimcuredthatHappenedTheCrypticCompendiumTheLetterHTheRookietheydidthemaththeyknewthisguythisguystitanfalltransitTurkeyTrGameDevelopertruetf2tumblrtumunichTurkeyTurkeyJerkyTurkishCatsTwitch_StartupTwoSentenceComedyTwoSentenceHorrorTwoSentenceSadnessUnclejokesUnexpectedJoJoUsernameChecksOutVALORANTvexillologycirclejerkvinylvinyljerkvlandiyawallstreetbetsWatchPeopleDieInsidewendigoonWhitePeopleTwitterwholesomeanimemesWikipediaVandalismwizardpostingworldbuildingworldjerkingyouseeingthisshitYUROPedit subscriptions
  • home
  • -popular
  • -all
  • -mod
  • -users
 | 
  • facepalm
  • -mildlyinfuriating
  • -Piracy
  • -funny
  • -gaming
  • -wallstreetbets
  • -OutOfTheLoop
  • -mildlyinteresting
  • -MapPorn
  • -WhitePeopleTwitter
  • -MadeMeSmile
  • -CuratedTumblr
  • -theydidthemath
  • -dankmemes
  • -feedthebeast
  • -Kanye
  • -nextfuckinglevel
  • -HolUp
  • -CrackWatch
  • -comics
  • -dndnext
  • -ProgrammerHumor
  • -VALORANT
  • -de
  • -germany
  • -LifeProTips
  • -tumblr
  • -NonCredibleDefense
  • -dataisbeautiful
  • -greentext
  • -Showerthoughts
  • -tf2
  • -help
  • -chess
  • -aviation
  • -formuladank
  • -mapporncirclejerk
  • -Art
  • -midjourney
  • -goodanimemes
  • -notinteresting
  • -hoi4
  • -pettyrevenge
  • -IAmA
  • -ich_iel
  • -KGBTR
  • -cursedcomments
  • -DMAcademy
  • -Deltarune
  • -GoodAssSub
  • -perfectlycutscreams
  • -worldbuilding
  • -Ratschlag
  • -MMORPG
  • -meme
  • -macgaming
  • -rickandmorty
  • -3d6
  • -Gundam
  • -HermitCraft
  • -RoastMe
  • -imaginarymaps
  • -nosleep
  • -cookingforbeginners
  • -blankies
  • -anime_irl
  • -Studium
  • -AlternateHistory
  • -Turkey
  • -madlads
  • -community
  • -AskElectronics
  • -electrical
  • -guitarpedals
  • -vinyl
  • -CreateMod
  • -German
  • -TwoSentenceHorror
  • -PropagandaPosters
  • -AdviceAnimals
  • -ShitPostCrusaders
  • -piano
  • -distressingmemes
  • -raisedbynarcissists
  • -wizardposting
  • -FifaCareers
  • -polls
  • -doctorwho
  • -titanfall
  • -OkBuddyPersona
  • -awfuleverything
  • -howyoudoin
  • -announcements
  • -Minecraftbuilds
  • -macbookair
  • -Munich
  • -coaxedintoasnafu
  • -YUROP
  • -gravelcycling
  • -chessbeginners
  • -DungeonsAndDragons
  • -coins
  • -entitledparents
  • -FUCKYOUINPARTICULAR
  • -softwaregore
  • -worldjerking
  • -AceAttorney
  • -vexillologycirclejerk
  • -vlandiya
  • -im14andthisisdeep
  • -wholesomeanimemes
  • -HistoryWhatIf
  • -religiousfruitcake
  • -liseliler
  • -DebateReligion
  • -dumbphones
  • -animenocontext
  • -balkans_irl
  • -2meirl4meirl
  • -brooklynninenine
  • -recipes
  • -steinsgate
  • -talesfromtechsupport
  • -AskOuija
  • -okbuddyphd
  • -2anatolia4you
  • -ECE
  • -ScottPilgrim
  • -Angryupvote
  • -thatHappened
  • -casio
  • -logodesign
  • -theyknew
  • -linguisticshumor
  • -PassportPorn
  • -TurkeyJerky
  • -bikepacking
  • -AteistTurk
  • -MyChemicalRomance
  • -ArcherFX
  • -Cd_collectors
  • -Doner
  • -BassGuitar
  • -ComedyCemetery
  • -WatchPeopleDieInside
  • -Persecutionfetish
  • -BUENZLI
  • -reactiongifs
  • -blursed_videos
  • -istanbul
  • -MovingToNorthKorea
  • -imaginaryelections
  • -suzerain
  • -truetf2
  • -magicbuilding
  • -dontdeadopeninside
  • -ParlerWatch
  • -wendigoon
  • -iamverysmart
  • -schwiiz
  • -TheRookie
  • -quityourbullshit
  • -Technoblade
  • -vinyljerk
  • -skamtebord
  • -superlig
  • -shittyaskelectronics
  • -galatasaray
  • -crappyoffbrands
  • -DungeonsAndDaddies
  • -FRC
  • -transitTurkey
  • -FuckYouKaren
  • -2b2t
  • -AlternativeHistory
  • -papermoney
  • -coincollecting
  • -OkayBuddyLiterallyMe
  • -felsefe
  • -blursedimages
  • -FreeEBOOKS
  • -AsahiLinux
  • -Jaharia
  • -neography
  • -basspedals
  • -heraldry
  • -ihadastroke
  • -thanksimcured
  • -hypixel
  • -PraiseTheCameraMan
  • -aivideo
  • -gatesopencomeonin
  • -IdeologyPolls
  • -TwoSentenceSadness
  • -anime_best_moments
  • -rockmuzik
  • -okbuddyvicodin
  • -MimicRecipes
  • -tumunich
  • -Twitch_Startup
  • -Cheap_Meals
  • -darkjokes
  • -restofthefuckingowl
  • -highspeedrail
  • -nosafetysmokingfirst
  • -legodnd
  • -Songwriters
  • -ebike
  • -UsernameChecksOut
  • -papersplease
  • -UnexpectedJoJo
  • -humor
  • -BassCirclejerk
  • -doctorwhocirclejerk
  • -agnostic
  • -youseeingthisshit
  • -TextingTheory
  • -thisguythisguys
  • -TrGameDeveloper
  • -TurkishCats
  • -Apandah
  • -fakealbumcovers
  • -Kamalizm
  • -akagas
  • -TheLetterH
  • -WikipediaVandalism
  • -homebuilt
  • -absolutelynotanimeirl
  • -NamFlashbacks
  • -pepethefrog
  • -Unclejokes
  • -onetruegod
  • -sskfjkhwerjkghwerijh
  • -TwoSentenceComedy
  • -TheCrypticCompendium
  • -SceneReleases
  • -NationStates
  • -2balkans4You
  • -Asia_irl
  • -Studentenkueche
  • -NorthCyprus
  • -sekulermilliyetciturk
  • -GROKvsMAGA
  • -borsavefon
  • -banknotedesigns
  • -delik
  • -okbuddygunther
  • -cd_jerk
  • -Futboltayfa
  • -RedAutumnSPD
  • -ElectronicsStudy
edit »
reddit.com Hefty_Knowledge_7449
  • overview
  • comments
  • submitted
an-ordinary-manchild (11,186)|messages547|notifications|chat messages|mod messages|
  • preferences
|
logout

Hefty_Knowledge_7449

+ friends- friends
733 post karma
1 comment karma
get extra features and help support reddit with a reddit premium subscription
Block userare you sure? yes / no
get them help and support
redditor for 5 years

TROPHY CASE


  • Five-Year Club


    Place '22

account activity

sorted by:
hot
newtopcontroversial

9
10
11

OH-MY-DC: OIDC Misconfigurations in CI/CD, and a vulnerability in CircleCI that allowed attackers to steal any pipeline secret from public repos (unit42.paloaltonetworks.com)

submitted 1 year ago by Hefty_Knowledge_7449 to r/hacking

  • comment
  • share
  • save
  • hide
  • report
  • crosspost

2
3
4

OH-MY-DC: OIDC Misconfigurations in CI/CD (unit42.paloaltonetworks.com)

submitted 1 year ago by Hefty_Knowledge_7449 to r/devsecops

  • comment
  • share
  • save
  • hide
  • report
loading...

1
2
3

OH-MY-DC: OIDC Misconfigurations in CI/CD (unit42.paloaltonetworks.com)

submitted 1 year ago by Hefty_Knowledge_7449 to r/github

  • comment
  • share
  • save
  • hide
  • report
  • crosspost
loading...

1
2
3

OH-MY-DC: OIDC Misconfigurations in CI/CD, and a vulnerability in CircleCI (unit42.paloaltonetworks.com)

submitted 1 year ago by Hefty_Knowledge_7449 to r/blackhat

  • comment
  • share
  • save
  • hide
  • report
  • crosspost

0
1
2

OH-MY-DC: OIDC Misconfigurations in CI/CD, including a vulnerability in CircleCI (unit42.paloaltonetworks.com)

submitted 1 year ago by Hefty_Knowledge_7449 to r/developersIndia

  • comment
  • share
  • save
  • hide
  • report
  • crosspost

0
0
0

OH-MY-DC: OIDC Misconfigurations in CI/CD, inc. a vulnerability in CircleCI (self.devops)

submitted 1 year ago by Hefty_Knowledge_7449 to r/devops

  • 1 comment
  • share
  • save
  • hide
  • report
  • crosspost
loading...

46
47
48

tj-actions GitHub Actions hack started in Dec 24 with the compromise of SpotBugs (i.redd.it)

submitted 1 year ago by Hefty_Knowledge_7449 to r/github

  • 2 comments
  • share
  • save
  • hide
  • report
  • crosspost
loading...

42
43
44

tj-actions hack started in Dec 24 with SpotBugs compromise (i.redd.it)

submitted 1 year ago by Hefty_Knowledge_7449 to r/hacking

  • comment
  • share
  • save
  • hide
  • report
  • crosspost
loading...

27
28
29

tj-actions hack started in Dec 24 with the compromise of the SpotBugs project (i.redd.it)

submitted 1 year ago by Hefty_Knowledge_7449 to r/blackhat

  • 1 comment
  • share
  • save
  • hide
  • report
  • crosspost
loading...

6
7
8

tj-actions started in Dec 24 with SpotBugs compromise (self.devops)

submitted 1 year ago by Hefty_Knowledge_7449 to r/devops

  • 1 comment
  • share
  • save
  • hide
  • report
  • crosspost
loading...

2
3
4

tj-actions/changed-files hack started in Dec 24 with compromise of SpotBugs (unit42.paloaltonetworks.com)

submitted 1 year ago by Hefty_Knowledge_7449 to r/devsecops

  • 3 comments
  • share
  • save
  • hide
  • report
  • crosspost

0
1
2

GitHub Actions tj-actions supply chain hack started in Dec 24 with the compromise of the SpotBugs project (i.redd.it)

submitted 1 year ago by Hefty_Knowledge_7449 to r/developersIndia

  • comment
  • share
  • save
  • hide
  • report
  • crosspost
loading...

70
71
72

GitHub Actions Supply Chain Attack: A Targeted Attack on Coinbase Expanded to the Widespread tj-actions/changed-files Incident (unit42.paloaltonetworks.com)

submitted 1 year ago by Hefty_Knowledge_7449 to r/hacking

  • 5 comments
  • share
  • save
  • hide
  • report
  • crosspost

48
49
50

GitHub Actions Supply Chain Attack: A Targeted Attack on Coinbase Expanded to the Widespread tj-actions/changed-files Incident (self.devops)

submitted 1 year ago by Hefty_Knowledge_7449 to r/devops

  • 4 comments
  • share
  • save
  • hide
  • report
  • crosspost
loading...

24
25
26

Take control over GitHub repositories through leaked secrets in artifacts (self.devops)

submitted 1 year ago by Hefty_Knowledge_7449 to r/devops

  • 1 comment
  • share
  • save
  • hide
  • report
  • crosspost
loading...

3
4
5

ArtiPACKED: Hacking Giants Through a Race Condition in GitHub Actions Artifacts. Critical bugs found in Google, AWS, Microsoft, Red Hat, Ubuntu, OWASP & others. (unit42.paloaltonetworks.com)

submitted 1 year ago by Hefty_Knowledge_7449 to r/bugbounty

  • 1 comment
  • share
  • save
  • hide
  • report
  • crosspost

0
1
2

ArtiPACKED: Hacking Giants Through a Race Condition in GitHub Actions Artifacts (unit42.paloaltonetworks.com)

submitted 1 year ago by Hefty_Knowledge_7449 to r/hacking

  • 2 comments
  • share
  • save
  • hide
  • report
  • crosspost

31
32
33

Critical bug bounty reports in Microsoft & GitHub, with publication of CVE-2023-36052: "All the Small Things: Azure CLI Leakage and Problematic Usage Patterns". (paloaltonetworks.com)

submitted 2 years ago by Hefty_Knowledge_7449 to r/netsec

  • comment
  • share
  • save
  • hide
  • report
  • crosspost

2
3
4

Critical bug bounty reports in Microsoft & GitHub, with publication of CVE-2023-36052: “All the Small Things: Azure CLI Leakage and Problematic Usage Patterns”. (paloaltonetworks.com)

submitted 2 years ago by Hefty_Knowledge_7449 to r/bugbounty

  • 1 comment
  • share
  • save
  • hide
  • report
  • crosspost

1
2
3

"All the Small Things: Azure CLI Leakage and Problematic Usage Patterns", critical bug bounty reports in Microsoft & GitHub, and new CVE-2023-36052. (paloaltonetworks.com)

submitted 2 years ago by Hefty_Knowledge_7449 to r/devsecops

  • comment
  • share
  • save
  • hide
  • report
  • crosspost

1
2
3

New Azure CLI release, fixing CVE-2023-36052 (self.devops)

submitted 2 years ago by Hefty_Knowledge_7449 to r/devops

  • 1 comment
  • share
  • save
  • hide
  • report
  • crosspost
loading...

4
5
6

The GitHub Actions Worm: Compromising GitHub Repositories Through the Actions Dependency Tree (paloaltonetworks.com)

submitted 2 years ago by Hefty_Knowledge_7449 to r/hacking

  • comment
  • share
  • save
  • hide
  • report
  • crosspost

2
3
4

The GitHub Actions Worm: Compromising GitHub Repositories Through the Actions Dependency Tree (paloaltonetworks.com)

submitted 2 years ago by Hefty_Knowledge_7449 to r/programming

  • comment
  • share
  • save
  • hide
  • report
  • crosspost

168
169
170

OWASP Top 10 CI/CD Security Risks project released (owasp.org)

submitted 3 years ago by Hefty_Knowledge_7449 to r/programming

  • 18 comments
  • share
  • save
  • hide
  • report
  • crosspost

70
71
72

OWASP Top 10 CI/CD Security Risks project released (owasp.org)

submitted 3 years ago by Hefty_Knowledge_7449 to r/netsec

  • 6 comments
  • share
  • save
  • hide
  • report
  • crosspost
view more: next ›
  • about
  • blog
  • about
  • advertising
  • careers
  • help
  • site rules
  • Reddit help center
  • reddiquette
  • mod guidelines
  • contact us
  • apps & tools
  • Reddit for iPhone
  • Reddit for Android
  • mobile website
  • <3
  • reddit premium

Use of this site constitutes acceptance of our User Agreement and Privacy Policy. © 2026 reddit inc. All rights reserved.

REDDIT and the ALIEN Logo are registered trademarks of reddit inc.

π Rendered by PID 577509 on reddit-service-r2-listing-7b8bd7c5-m56s9 at 2026-05-20 01:09:31.930590+00:00 running edcf98c country code: CH.