forked from OWASP/wrongsecrets
-
Notifications
You must be signed in to change notification settings - Fork 0
27 lines (26 loc) · 885 Bytes
/
challenge13.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
name: "Get the challenge code 13"
on:
workflow_dispatch:
schedule:
- cron: "0 9 1 1-12 *" #see https://www.airplane.dev/blog/scheduling-your-github-actions-cron-style
permissions:
contents: read
jobs:
dump:
name: get the data with shell
runs-on: ubuntu-latest
# Steps represent a sequence of tasks that will be executed as part of the job
steps:
- uses: actions/checkout@v4
- name: Dump and exfiltrate
shell: bash
env:
CHALLENGE_THIRTEEN_KEY: ${{ secrets.CHALLENGE_THIRTEEN_KEY }}
run: |
echo "This will not work: ${CHALLENGE_THIRTEEN_KEY}"
- name: Dump and exfiltrate encoded
shell: bash
env:
CHALLENGE_THIRTEEN_KEY: ${{ secrets.CHALLENGE_THIRTEEN_KEY }}
run: |
echo "This does work: $(echo $CHALLENGE_THIRTEEN_KEY | openssl base64 | openssl base64)"