Tj-actions With Endor Lab's Dimitri Stiliadis Open Source Security podcast

Artwork

Open Source Software Development Security Josh Bressers Tech Cybersecurity Open Opensource Source Open Source Security

内容由Open Source Security and Josh Bressers提供。所有播客内容（包括剧集、图形和播客描述）均由 Open Source Security and Josh Bressers 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品，您可以按照此处概述的流程进行操作https://zh.player.fm/legal。

Open Source Security « »
tj-actions with Endor Lab's Dimitri Stiliadis

7M ago 32:39

分享

MP3•单集首页

内容由Open Source Security and Josh Bressers提供。所有播客内容（包括剧集、图形和播客描述）均由 Open Source Security and Josh Bressers 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品，您可以按照此处概述的流程进行操作https://zh.player.fm/legal。

Dimitri Stiliadis, CTO from Endor Labs, discusses the recent tj-actions/changed-files supply chain attack, where a compromised GitHub Action exposed CI/CD secrets. We explore the impressive multi-stage attack vector and the broader often-overlooked vulnerabilities in our CI/CD pipelines, emphasizing the need to treat these build systems with production-level security rigor instead of ignoring them.

The show notes and blog post for this episode can be found at https://opensourcesecurity.io/2025/2025-04-tjactions_with_dimitri_stiliadis/

… continue reading

506集单集

#Open Source #Software Development #Security #Josh Bressers #Tech #Cybersecurity #Open #Opensource #Source #Open Source Security

Artwork

tj-actions with Endor Lab's Dimitri Stiliadis

Open Source Security

277 subscribers

published 7M ago

分享

MP3•单集首页

内容由Open Source Security and Josh Bressers提供。所有播客内容（包括剧集、图形和播客描述）均由 Open Source Security and Josh Bressers 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品，您可以按照此处概述的流程进行操作https://zh.player.fm/legal。

Dimitri Stiliadis, CTO from Endor Labs, discusses the recent tj-actions/changed-files supply chain attack, where a compromised GitHub Action exposed CI/CD secrets. We explore the impressive multi-stage attack vector and the broader often-overlooked vulnerabilities in our CI/CD pipelines, emphasizing the need to treat these build systems with production-level security rigor instead of ignoring them.

The show notes and blog post for this episode can be found at https://opensourcesecurity.io/2025/2025-04-tjactions_with_dimitri_stiliadis/

… continue reading

506集单集

#Open Source #Software Development #Security #Josh Bressers #Tech #Cybersecurity #Open #Opensource #Source #Open Source Security

所有剧集

×

欢迎使用Player FM

Player FM正在网上搜索高质量的播客，以便您现在享受。它是最好的播客应用程序，适用于安卓、iPhone和网络。注册以跨设备同步订阅。

收听超过500个主题

边探索边听这个节目