pvharmo2/gha-lab-ba8e0c4217Authorized security-research lab: reproduction of CVE-2024-42370 / GHSA-4hq2-rpgc-r8r7 (env injection in docs-preview.yml) β snapshot of litestar-org/litestar@18d84d84
Automated research artifact β not the upstream project.
This repository is a disposable lab built by an automated harness for a master's thesis at UniversitΓ© Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of
litestar-org/litestarat commit18d84d846b782ccaab06f550a4defce22b3082e8(2024-07-27), redistributed under that project's own licence, whose file is included unchanged in this snapshot.The upstream project is not involved, is never targeted, and the vulnerability studied here is already public. Every secret and variable in this repository is a randomly generated dummy value β no real credential is present. Action references and runner images are pinned to what they resolved to on 2024-07-27; see
pinning.mdin the harness output for every change made to the snapshot.Questions or objections: [email protected]
| Project | Status | |
|---|---|---|
| CI/CD |    | |
| Quality |  | |
| Package |     |
