Merge branch 'main' into NJannasch-patch-1

BusinessAsUsualEnterprise · Mar 6, 2024 · cb38d40 · cb38d40
2 parents 8e7cb12 + f70e0fa
commit cb38d40
Show file tree

Hide file tree

Showing 5 changed files with 17 additions and 2 deletions.
diff --git a/README.md b/README.md
@@ -1,4 +1,19 @@
-# pipeline
+# CI/CD Security Example
+This is a minimal example to highlight Direct Poisioned Pipeline Execution  
+[https://owasp.org/www-project-top-10-ci-cd-security-risks/CICD-SEC-04-Poisoned-Pipeline-Execution](https://owasp.org/www-project-top-10-ci-cd-security-risks/CICD-SEC-04-Poisoned-Pipeline-Execution).
 
-fghhg
 
+## Branch Protections
+![Branch Protections](branchprotections.png)
+
+## Secrets
+![Secrets](secrets.png)
+
+## Howto
+Create a new branch and open a pull request. The pull request title can be used for command injection into the pipeline to e.g. access the secrets.  
+![PR Example](prexample.png)
+
+This results into a call to google  
+![PR Example Agent](prexample-agent.png)
+# Other
+Made with ❤ in Dortmund
diff --git a/branchprotections.png b/branchprotections.png
diff --git a/prexample-agent.png b/prexample-agent.png
diff --git a/prexample.png b/prexample.png
diff --git a/secrets.png b/secrets.png