Attackers stole secrets from GitHub logs
A stolen token plants a workflow that copies available secrets into its own logs. Check actual execution, preserve retained records and control access to secrets.
Replay3:10 Narrated visual walkthrough
Add a workflow
Copy secrets into logs
Gate access to secrets
