Skip to content
How JFrog’s AI-Research Bot Found OSS CI/CD Vulnerabilities to Prevent Shai Hulud 3.0
jfrog.com | incident | #ai-security | #supply-chain | #vulnerability-research | #github-actions | #ci-cd | #jfrog | #shai-hulud | #repo-hunter
Summary
JFrog's RepoHunter bot proactively hunted CI/CD 'Pwn Request' flaws across open source; 13 GitHub Actions vulnerabilities were fixed after disclosure, pre-empting a Shai-Hulud 3.0.
- Published
- Collected