The Trojan Horse in Your Pipeline: Gifts, Walls and pull_request_target
Troy didn’t fall to a siege. It fell because the city carried a gift inside its own walls. CI pipelines that run untrusted code where the secrets live make the same mistake, every day.