Search


	Podcast:		Application Security PodCast
	Episode:		François Proulx - Arbitrary Code Execution 0-day in Build Pipeline of Popular Open Source Packages
	Category:		Technology
	Duration:		00:45:31
	Publish Date:		2024-10-22 21:00:00
	Description:		François Proulx joins Chris and Robert to share his discovery of security vulnerabilities in build pipelines. Francois has found that attackers can exploit this often overlooked side of the software supply chain. To help address this, his team developed an open source scanner called Poutine that can identify vulnerable build pipelines at scale and provide remediation guidance. Francois has over 10 years of experience in building application security programs, he’s also the founder of the NorthSec conference in Montreal. Mentioned in the Episode: Cooking for Geeks by Jeff Potter Poutine Living Off the Pipeline project Grand Theft Actions Abusing Self Hosted GitHub Runners - Adnan Khan and John Stawinski Where to find Francois: LinkedIn X: @francoisproulx Previous Episodes: François Proulx -- Actionable Software Supply Chain Security FOLLOW OUR SOCIAL MEDIA: ➜Twitter: @AppSecPodcast ➜LinkedIn: The Application Security Podcast ➜YouTube: https://www.youtube.com/@ApplicationSecurityPodcast Thanks for Listening! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
	Total Play:		0