Exploiting misconfigured Google Cloud Service Accounts from GitHub Actions
Out of the 30 public repositories I checked, 6 had vulnerable GCP Service Accounts because of this misconfiguration.
Revblock
Security Engineer