GitHub Actions + Nuclei

This is a demo on using GitHub Action and Nuclei to protect your CI. It also includes how an attacker can leverage GHA to mine cryptocurrencies, pivot into other targets, and distribute backdoors into different repositories. 

Links:

• GHA Runners - Security In Action
  
• Nuclei - Community Powered Vulnerability Scanner