zizmor would have caught the Ultralytics workflow vulnerability
TL;DR: zizmor would have caught the vulnerability that caused this…mostly. Read on for details.
cyberveille.decio.ch
RoguePuppet – A Critical Puppet Forge Supply Chain Vulnerability
What if there was a supply chain attack that could provide an attacker with direct access to core infrastructure within thousands of companies worldwide. What if that attack required no social engi…