linkdd

    The Rust Security Response Team was notified that Miri stores all environment variables to target/,
    allowing secrets to persist in caches.

Then proceed to blame Github Actions.

All CI platform that provide caching and would naturally cache the build folder that is target/ would have this security hole. The culprit is cargo miri, not Github Actions.

  Location: Lille, France
  Remote: yes
  Willing to relocate: no
  Technologies:
    - Devops: Kubernetes, Docker, Ansible, Terraform, Netbox, GCP, AWS, ...
    - Backend: Python (Django, FastAPI, ...), Go, Rust, C, C++, Elixir
    - Frontend: TypeScript (React, Vue), HTMX
    - Databases: PostgreSQL, MongoDB, FoundationDB
    - MQ: RabbitMQ, Kafka, Amazon SQS
    - Monitoring: Prometheus, Grafana, Nagios/Icinga, Zabbix, FlowG, Splunk, Datadog
    - CICD: Jenkins, Github Actions, Gitlab CI, ...
  CV: https://linkdd.github.io
  LinkedIn: https://linkedin.com/in/linkdd
  Email: [email protected]

10+ years of experience as a Software Engineer and DevOps engineer, 20+ years as a hobbyist.

I'm passionate by big challenges and available immediately.

  Location: Lille, France
  Remote: yes
  Willing to relocate: no
  Technologies:
    - Devops: Kubernetes, Docker, Ansible, Terraform, Netbox, GCP, AWS, ...
    - Backend: Python (Django, FastAPI, ...), Go, Rust, C, C++, Elixir
    - Frontend: TypeScript (React, Vue), HTMX
    - Databases: PostgreSQL, MongoDB, FoundationDB
    - MQ: RabbitMQ, Kafka, Amazon SQS
    - Monitoring: Prometheus, Grafana, Nagios/Icinga, Zabbix, FlowG, Splunk, Datadog
    - CICD: Jenkins, Github Actions, Gitlab CI, ...
  CV: https://linkdd.github.io
  Email: [email protected]

10+ years of experience as a Software Engineer and DevOps engineer, 20+ years as a hobbyist.

I'm passionate by big challenges and available immediately.