SecurityLobstersabout 2 hours ago
Miri Leaks Secrets via GitHub Actions Cache
4 min read
The Rust Security Response Team disclosed that Miri stores all environment variables in target/, so when GitHub Actions caches that directory, secrets can leak to pull requests. An ecosystem scan found one vulnerable repository and seven at-risk ones. A fix limiting Miri to CARGO_* and OUT_DIR variables ships in the 2026-09-22 nightly.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyGitHub
