github-actions-cache-poisoning

What problem does it solve?

This Skill addresses the critical vulnerability in CI/CD pipelines where attackers can inject malicious code into shared caches, leading to supply chain compromises.

Core Features & Use Cases

• Cache Poisoning: Exploit shared GitHub Actions cache mechanisms to inject malware.
• Supply Chain Attack Vector: Leverage poisoned caches to compromise downstream privileged workflows.
• Use Case: An attacker triggers a low-privilege workflow that poisons the node_modules cache. A subsequent high-privilege release workflow restores this poisoned cache, executing malicious code and exfiltrating secrets.

Quick Start

Use the github-actions-cache-poisoning skill to identify cache key overlaps between PR and release workflows.