DEV Community

Discussion on: Crypto-mining attack in my GitHub actions through Pull Request

Collapse
 
harshit9715 profile image
Harshit Gupta

One of my repo got attacked yesterday. I am glad that I turned off my ec2 runner the night before. Not being able to sleep part is a real deal. I disabled all my actions on all my public repo's until this gets resolved. Even though it impacts github infra and not the users or their code, I love github services and community. I was looking for a way to restrict workflow changes. (did not found anything yet)
I really enjoyed reading your post. 😀