Ghosts in Your GitHub Actions and AI’s Hunt for Hidden Exploits
Conference
C0c0n 2025
October 10, 2025
Abstract
An AI powered Security analysis tool that identifies hidden threats (Malicious/Compromised) - GitHub Actions. A tool to proactively identify attacks such as Tj-actions/changef-files.
Key Topics Covered
- Hidden GitHub Actions Threats - Identifying malicious and compromised actions
- AI-Powered Detection - Using machine learning for threat identification
- Proactive Security - Preventing attacks before they execute
- Real-world Examples - Case studies of actual GitHub Actions attacks
- ActionsGuardHub - Practical tool for GitHub Actions security
Technical Focus
- Malicious Action Detection - Identifying compromised third-party actions
- Vulnerability Scanning - Automated security assessment
- AI Integration - Machine learning for pattern recognition
- Automation - Seamless CI/CD integration
Impact
This talk demonstrates how AI can be leveraged to protect CI/CD pipelines from sophisticated attacks, providing practical solutions for GitHub Actions security.
Related Work
- ActionsGuardHub - AI-powered GitHub Actions security scanner
- Supply Chain Security - Comprehensive protection strategies
- Automation Security - Protecting development workflows