atlantis

Author: carlospolop

src/pentesting-ci-cd/atlantis-security.md

@@ -97,7 +97,7 @@ In case `allowed_overrides` is True, these setting can be **overwritten on each
 
 The repo config can **specify scripts** to run [**before**](https://www.runatlantis.io/docs/pre-workflow-hooks.html#usage) (_pre workflow hooks_) and [**after**](https://www.runatlantis.io/docs/post-workflow-hooks.html) (_post workflow hooks_) a **workflow is executed.**
 
-There isn't any option to allow **specifying** these scripts in the **repo `/atlantis.yml`** file.
+There isn't any option to allow **specifying** these scripts in the **repo `/atlantis.yml`** file. However, if there is a confgured script to execute that is located in the same repo, it's possible to **modify it's content in a PR and make it execute arbitrary code.**
 
 **Workflow**