++

Aegrah · Aegrah · commit 22d74f663c20 · 2025-11-27T10:56:11.000+01:00
diff --git a/rules/cross-platform/execution_via_github_runner_with_audit_disabled_via_env_vars.toml b/rules/cross-platform/execution_via_github_runner_with_audit_disabled_via_env_vars.toml
@@ -20,6 +20,7 @@ references = [
     "https://www.elastic.co/blog/shai-hulud-worm-npm-supply-chain-compromise",
     "https://socket.dev/blog/shai-hulud-strikes-again-v2",
     "https://www.wiz.io/blog/shai-hulud-2-0-ongoing-supply-chain-attack",
+    "https://www.praetorian.com/blog/self-hosted-github-runners-are-backdoors/",
 ]
 risk_score = 73
 rule_id = "df0553c8-2296-45ef-b4dc-3b88c4c130a7"

Original file line number	Diff line number	Diff line change
`@@ -20,6 +20,7 @@ references = [`
`20`	`20`	`"https://www.elastic.co/blog/shai-hulud-worm-npm-supply-chain-compromise",`
`21`	`21`	`"https://socket.dev/blog/shai-hulud-strikes-again-v2",`
`22`	`22`	`"https://www.wiz.io/blog/shai-hulud-2-0-ongoing-supply-chain-attack",`
	`23`	`+ "https://www.praetorian.com/blog/self-hosted-github-runners-are-backdoors/",`
`23`	`24`	`]`
`24`	`25`	`risk_score = 73`
`25`	`26`	`rule_id = "df0553c8-2296-45ef-b4dc-3b88c4c130a7"`