Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ADO Pwn Request #169

Merged
merged 6 commits into from
Jul 24, 2024
Merged

ADO Pwn Request #169

merged 6 commits into from
Jul 24, 2024

Conversation

SUSTAPLE117
Copy link
Contributor

@SUSTAPLE117 SUSTAPLE117 commented Jul 22, 2024

Fixes #164 Adds support for finding Arbitrary Code Execution from Untrusted Code Changes to Azure Devops(what can be detected from workflow file)

@SUSTAPLE117 SUSTAPLE117 marked this pull request as ready for review July 22, 2024 20:54
@SUSTAPLE117 SUSTAPLE117 requested a review from a team as a code owner July 22, 2024 20:54
@fproulx-boostsecurity
Copy link
Contributor

Can you please update documentation with Best , Bad examples and also small caveat section that false positive is likely given that static analysis of solely the pipeline file is not enough to confirm exploitability. Maybe take even screenshots of the ADO UI in the best vs bad. To show really how it would be bad

@SUSTAPLE117 SUSTAPLE117 merged commit b833ac6 into main Jul 24, 2024
8 checks passed
@SUSTAPLE117 SUSTAPLE117 deleted the feat/adoPwnRequest branch July 24, 2024 21:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Improve ADO : add pwn request support
2 participants