EPISODE · Apr 8, 2025
Episode 281 - Signing Models, Vibe Coding, GitHub Action Abuse
from Absolute AppSec
The duo are back for a discussion on securing machine learning models using Sigstore, based on a recent blog post from Google Security. Followed by some spicy takes on opinions on vibe coding and its effects on application and product security. Finally, short-lived tokens used to exploit RCE against the GitHub CodeQL Action.
Embed this episode
Ready to play
Episode 281 - Signing Models, Vibe Coding, GitHub Action Abuse
0:00
0:00
1×
No transcript for this episode yet
Similar Episodes
No similar episodes found.
Similar Podcasts
No similar podcasts found.
Frequently Asked Questions
When was this Absolute AppSec episode published?
This episode was published on April 8, 2025.
Can I download this Absolute AppSec episode?
Yes. Use the download control on the episode player to save the publisher-provided media file.
URL copied to clipboard!