ArtiPACKED: Hacking Giants Through a Race Condition in GitHub Actions Artifacts

unit42.paloaltonetworks.com

1 pointcroemer1 comment

Github's response was pretty bad. They changed the upload-artifacts workflow to no longer include hidden files _in a minor release_ and that broke thousands of workflows that required hidden files.

Github issue with angry comments: https://github.com/actions/upload-artifact/issues/602

Reply on news.ycombinator.com