Evidence · DiggingBeagle record
Gemini CLI pull request 30090: chained e2e workflow secret boundary
Gemini CLI PR 30090 describes a chained_e2e workflow_run job with GEMINI_API_KEY exposed while checking out or installing fork-controlled PR content.
- Source role
- primary disclosure
Evidence record
Gemini CLI PR 30090 describes a chained_e2e workflow_run job with GEMINI_API_KEY exposed while checking out or installing fork-controlled PR content.
Claim-level citations (1)
- supportsGemini CLI CI workflow proposal flags privileged secrets exposed to fork-controlled build steps: Gemini CLI PR 30090 describes a chained_e2e workflow_run job with GEMINI_API_KEY exposed while checking out or installing fork-controlled PR content.
Pull request 30090, workflow_run event and checkout/install order