GitHub Actions leaking secrets when Miri output is cached

GitHub Actions leaking secrets when Miri output is cached(blog.rust-lang.org)

2 points by metrofun 24 days ago | 1 comment

linkdd 24 days ago |

    The Rust Security Response Team was notified that Miri stores all environment variables to target/,
    allowing secrets to persist in caches.

Then proceed to blame Github Actions.

All CI platform that provide caching and would naturally cache the build folder that is target/ would have this security hole. The culprit is cargo miri, not Github Actions.

GitHub Actions leaking secrets when Miri output is cached | Dark Hacker News