Cicd

GitHub Actions Workflows

GitHub Actions workflow files can reveal build logic, permissions, and secret references.

Metadata

  • id: cicd.github-actions.workflows
  • category: cicd
  • sensitivity: medium
  • subcategory: github-actions
  • artifact types: configuration
  • tags: github-actions, cicd

Path Matchers

PathKindPlatforms
**/.github/workflows/*.y?mlglobwindows, linux, macos

Content Indicators

Literal strings:

  • runs-on:
  • secrets.

Impact

  • discovery
  • source_code_access

References

On this page