41554 blogs · 4,644,446 posts Claim your blog

Record · corpus.blog/posts/01a08720-17b5-72a9-8c95-fd73e6d90d3d

RoguePuppet - A Critical Puppet Forge Supply Chain Vulnerability

adnanthekhan.com · published 2 July 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at adnanthekhan.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 17
Words captured: 3,091

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://forge.puppet.com/modules/puppetlabs/

forge.puppet.com

https://www.puppet.com/

puppet.com

https://forge.puppet.com/

forge.puppet.com

https://gist.githubusercontent.com/AdnaneKhan/ce8b032ec825fff402a51dc8519351d4/raw/b6029f4bbb220c13bf355d78325345240388ebac/puppet_gato_results.txt

gist.githubusercontent.com

https://github.com/puppetlabs/cat-github-actions/blob/main/.github/workflows/module_release.yml

github.com

https://github.com/puppetlabs/cat-github-actions/blob/c6ea79756d614f790e109d8c1e32362ff3315d23/.github/workflows/module_release.yml

github.com

https://docs.github.com/en/rest/actions/workflow-runs?apiVersion=2022-11-28

docs.github.com

https://forge.puppet.com/modules/puppetlabs/xzscanner

forge.puppet.com

https://securitylab.github.com/research/github-actions-preventing-pwn-requests/

securitylab.github.com

https://owasp.org/www-project-top-10-ci-cd-security-risks/CICD-SEC-04-Poisoned-Pipeline-Execution

owasp.org

https://johnstawinski.com/

johnstawinski.com

https://github.com/praetorian-inc/gato

github.com

https://github.com/adnaneKhan/

github.com

https://forge.puppet.com/modules/puppetlabs/accounts

forge.puppet.com

https://github.com/puppetlabs/puppetlabs-sqlserver/blob/main/.github/workflows/release.yml

github.com

https://github.com/puppetlabs/xzscanner

github.com

https://docs.github.com/en/actions/using-workflows/reusing-workflows

docs.github.com