anderssonjohan · September 2, 2020 12:39 · Sep 2, 2020
diff --git a/eop_github_actions.svg b/eop_github_actions.svg
diff --git a/readme.md b/readme.md
@@ -0,0 +1,4 @@
+Illustration of elevation of privilege vulnerability using GitHub Actions where GitHub Personal Access Tokens (PAT)
+are used to trigger the repository_dispatch event, which requires write access to the target repository. 
+With write access to the repo, the access allows creating workflows that prints the secrets in the target repository,
+which may contain GitHub secrets on the repo level or org level secrets only given out to selected repositories.