GitHub’s public APIs are becoming an enterprise reconnaissance tool

«GitHub continues to be a scintillating target for attackers because it sits in the middle of the software supply chain and gives threat actors three things they crave: source code, secrets, and automated pipelines to run...»