I Audit AWS Accounts. 8 Out of 10 Have This GitHub Actions Backdoor.

TL;DR: Configuring GitHub Actions OIDC is very convenient and useful, but often dangerous. If you...