nopcorn/"Dump Secrets" Action for Offensive Security Workflows
Dumps available workflow secrets and provides them as outputs for exfiltration
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| secrets-in | The secrets object passed from a malicious workflow | yes | — |
Outputs
| name | description |
|---|---|
| secrets-out | Double base64-encoded list of secrets |