https://x7peeps.com/tags/CI/index.htmlHugozh-CNTue, 10 Nov 2026 01:14:59 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E4%B8%80%E6%9D%A1fork-PR%E5%A6%82%E4%BD%95%E5%81%B7%E8%B5%B0CI%E5%AF%86%E9%92%A5workflow_run%E4%BF%A1%E4%BB%BB%E5%88%A4%E5%AE%9A/index.htmlTue, 10 Nov 2026 01:14:59 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E4%B8%80%E6%9D%A1fork-PR%E5%A6%82%E4%BD%95%E5%81%B7%E8%B5%B0CI%E5%AF%86%E9%92%A5workflow_run%E4%BF%A1%E4%BB%BB%E5%88%A4%E5%AE%9A/index.htmlGitHub Actions 里有一类设计，代码本身看不出问题，但组合起来就是一条完整的密钥外泄路径：第一个 workflow 在 PR 上跑，把结果打包成 artifact 上传；第二个 workflow 由 workflow_run 事件触发，在主仓库上下文里拿到密钥，再把 artifact 里的代码 checkout 出来执行。https://x7peeps.com/%E5%AE%89%E5%85%A8/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/04-%E6%B8%97%E9%80%8F%E6%94%BB%E5%87%BB/4-%E8%BA%AB%E4%BB%BD%E8%AE%A4%E8%AF%81%E4%B8%8EDevOps/Jenkins%E7%AE%A1%E7%90%86%E9%9D%A2%E6%89%93%E7%82%B9%E4%B8%8E%E6%8E%A5%E5%8F%A3%E5%88%A9%E7%94%A8%E6%8A%80%E6%9C%AF/index.htmlSat, 13 Jun 2026 13:46:56 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/04-%E6%B8%97%E9%80%8F%E6%94%BB%E5%87%BB/4-%E8%BA%AB%E4%BB%BD%E8%AE%A4%E8%AF%81%E4%B8%8EDevOps/Jenkins%E7%AE%A1%E7%90%86%E9%9D%A2%E6%89%93%E7%82%B9%E4%B8%8E%E6%8E%A5%E5%8F%A3%E5%88%A9%E7%94%A8%E6%8A%80%E6%9C%AF/index.html围绕Jenkins相关攻击面与利用路径，分析打点识别、接口枚举、风险链条、日志痕迹与防守处置思路。https://x7peeps.com/%E5%AE%89%E5%85%A8/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/04-%E6%B8%97%E9%80%8F%E6%94%BB%E5%87%BB/GitLab_CE_EE_%E9%A2%84%E8%AE%A4%E8%AF%81RCE_%E8%B4%A6%E6%88%B7%E6%8E%A5%E7%AE%A1_CI_Ci%E7%AE%A1%E9%81%93%E5%8A%AB%E6%8C%81_CVE%E6%BC%8F%E6%B4%9E%E9%93%BE%E5%88%A9%E7%94%A8%E6%8A%80%E6%9C%AF/index.htmlSun, 22 Jun 2025 00:00:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/04-%E6%B8%97%E9%80%8F%E6%94%BB%E5%87%BB/GitLab_CE_EE_%E9%A2%84%E8%AE%A4%E8%AF%81RCE_%E8%B4%A6%E6%88%B7%E6%8E%A5%E7%AE%A1_CI_Ci%E7%AE%A1%E9%81%93%E5%8A%AB%E6%8C%81_CVE%E6%BC%8F%E6%B4%9E%E9%93%BE%E5%88%A9%E7%94%A8%E6%8A%80%E6%9C%AF/index.html深入分析 GitLab CE/EE 的预认证 RCE 漏洞链、CVE-2023-7028 账户接管、CVE-2024-5655 管道冒充、CVE-2021-22205 ExifTool RCE、CI/CD 管道投毒、GraphQL API 滥用、SSRF、XSS 持久化等完整攻击面，覆盖 2018-2025 年高危 CVE 漏洞链及蓝队检测与应急响应https://x7peeps.com/%E5%AE%89%E5%85%A8/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/04-%E6%B8%97%E9%80%8F%E6%94%BB%E5%87%BB/Apache_Airflow_%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE_DAG%E6%8A%95%E6%AF%92_%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5_%E8%AE%A4%E8%AF%81%E7%BB%95%E8%BF%87_CVE%E6%BC%8F%E6%B4%9E%E9%93%BE%E5%88%A9%E7%94%A8%E6%8A%80%E6%9C%AF/index.htmlSun, 22 Jun 2025 00:00:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/04-%E6%B8%97%E9%80%8F%E6%94%BB%E5%87%BB/Apache_Airflow_%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE_DAG%E6%8A%95%E6%AF%92_%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5_%E8%AE%A4%E8%AF%81%E7%BB%95%E8%BF%87_CVE%E6%BC%8F%E6%B4%9E%E9%93%BE%E5%88%A9%E7%94%A8%E6%8A%80%E6%9C%AF/index.html深入分析 Apache Airflow 的未授权访问、DAG 投毒 RCE、CVE-2020-11978 命令注入、CVE-2023-39508 Run Task 越权、CVE-2024-37288 XCom 代码注入、认证绕过、CLI 凭证提取、Worker 侧信道攻击等完整攻击面，覆盖 2020-2025 年高危 CVE 漏洞链及蓝队检测与应急响应https://x7peeps.com/%E5%AE%89%E5%85%A8/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/04-%E6%B8%97%E9%80%8F%E6%94%BB%E5%87%BB/Jenkins_CICD_%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96_Groovy_RCE_%E4%BE%9B%E5%BA%94%E9%93%BE%E6%8A%95%E6%AF%92_CVE%E6%BC%8F%E6%B4%9E%E9%93%BE%E5%88%A9%E7%94%A8%E6%8A%80%E6%9C%AF/index.htmlThu, 03 Jul 2025 00:00:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/04-%E6%B8%97%E9%80%8F%E6%94%BB%E5%87%BB/Jenkins_CICD_%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96_Groovy_RCE_%E4%BE%9B%E5%BA%94%E9%93%BE%E6%8A%95%E6%AF%92_CVE%E6%BC%8F%E6%B4%9E%E9%93%BE%E5%88%A9%E7%94%A8%E6%8A%80%E6%9C%AF/index.html深入分析 Jenkins CI/CD 的任意文件读取（CVE-2024-23897）、Agent 协议信任（CVE-2024-43044）、Groovy Script Console RCE、Pipeline 供应链投毒、凭据窃取、插件漏洞等完整攻击面，覆盖 2017-2025 年高危 CVE 漏洞链及蓝队检测与应急响应https://x7peeps.com/%E5%AE%89%E5%85%A8/%E5%BA%94%E6%80%A5%E5%93%8D%E5%BA%94/0x03%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90/%E5%85%A8%E9%93%BE%E8%B7%AF%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90/%E4%BE%9B%E5%BA%94%E9%93%BE%E6%8A%95%E6%AF%92%E5%85%A8%E9%93%BE%E8%B7%AF%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90%E4%B8%8E%E8%AF%81%E6%8D%AE%E6%8B%BC%E6%8E%A5/index.htmlWed, 17 Jun 2026 13:00:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E5%BA%94%E6%80%A5%E5%93%8D%E5%BA%94/0x03%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90/%E5%85%A8%E9%93%BE%E8%B7%AF%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90/%E4%BE%9B%E5%BA%94%E9%93%BE%E6%8A%95%E6%AF%92%E5%85%A8%E9%93%BE%E8%B7%AF%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90%E4%B8%8E%E8%AF%81%E6%8D%AE%E6%8B%BC%E6%8E%A5/index.html以供应链投毒为场景，串联多个 0x02 取证项的检查结果，分析如何从分散的证据中拼接出完整的攻击链。https://x7peeps.com/%E5%AE%89%E5%85%A8/%E5%BA%94%E6%80%A5%E5%93%8D%E5%BA%94/0x03%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90/%E4%BE%9B%E5%BA%94%E9%93%BE%E6%94%BB%E5%87%BB%E5%8F%96%E8%AF%81%E6%B7%B1%E5%BA%A6%E5%88%86%E6%9E%90/index.htmlSun, 05 Jul 2026 10:00:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E5%BA%94%E6%80%A5%E5%93%8D%E5%BA%94/0x03%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90/%E4%BE%9B%E5%BA%94%E9%93%BE%E6%94%BB%E5%87%BB%E5%8F%96%E8%AF%81%E6%B7%B1%E5%BA%A6%E5%88%86%E6%9E%90/index.html系统剖析软件供应链攻击的取证分析方法论，涵盖npm/PyPI/Maven依赖投毒、GitHub Actions/CI-CD流水线污染、代码签名链验证、SolarWinds式高级持续性攻击、UEFI固件供应链篡改，结合SBOM生成与Sigstore验证等自动化检测手段，通过SolarWinds、XZ Utils、event-stream等真实案例还原完整攻击链https://x7peeps.com/%E5%AE%89%E5%85%A8/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/03-%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/CI-CD-%E4%B8%8E%E6%9E%84%E5%BB%BA%E5%8F%91%E5%B8%83%E5%B9%B3%E5%8F%B0/CI-CD%E4%B8%8E%E6%9E%84%E5%BB%BA%E5%8F%91%E5%B8%83%E5%B9%B3%E5%8F%B0%E9%AB%98%E5%8D%B1%E6%94%BB%E5%87%BB%E9%93%BE%E4%B8%93%E9%A2%98/index.htmlSun, 21 Jun 2026 14:00:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/03-%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/CI-CD-%E4%B8%8E%E6%9E%84%E5%BB%BA%E5%8F%91%E5%B8%83%E5%B9%B3%E5%8F%B0/CI-CD%E4%B8%8E%E6%9E%84%E5%BB%BA%E5%8F%91%E5%B8%83%E5%B9%B3%E5%8F%B0%E9%AB%98%E5%8D%B1%E6%94%BB%E5%87%BB%E9%93%BE%E4%B8%93%E9%A2%98/index.htmlCI/CD 与构建发布平台高危攻击链专题：TeamCity / Jenkins / GitLab 未授权 RCE 全解析 0x00 专题概述 CI/CD（持续集成/持续交付）平台是现代软件供应链的核心基础设施，承载着从代码提交到生产部署的全流程。一旦 CI/CD 平台被攻破，攻击者不仅可以窃取所有源代码和凭据，还能通过注入恶意构建步骤影响下游数千个用户——这正是供应链攻击的核心路径。