Novee found a pattern of CI/CD vulnerabilities in GitHub Actions workflows that let any unauthenticated user hijack build pipelines, steal credentials, or push malicious code. They scanned 30,000 repositories and confirmed over 300 fully exploitable cases at Microsoft, Google, Apache, Cloudflare, and others. AI coding agents are accelerating the spread of these insecure YAML patterns, putting millions of projects at risk.

• Novee scanned 30,000 repos, flagged 654 with the vulnerable pattern, and confirmed 300+ fully exploitable chains—including at Microsoft, Google, Apache, and Cloudflare.
• Unauthenticated attackers with just a free GitHub account can trigger workflows via PRs or comments to hijack maintainer permissions, steal tokens, or push malicious code.
• Real exploits included stealing a non-expiring GitHub App key from Azure Sentinel, gaining GCP project owner access via Google's AI Agent Dev Kit, and executing arbitrary commands on Cloudflare's CI runners via a crafted branch name.
• AI coding agents are mass-replicating these insecure YAML patterns, and traditional scanners miss them because they treat workflows as config rather than executable code.