T1199
Trusted Relationship
discovered 2026-06-01Abuse of npm GitHub Actions trusted publishing, which binds trust to repository + workflow filename rather than branch/ref/environment.
View on MITRE ATT&CK
Abuse of npm GitHub Actions trusted publishing, which binds trust to repository + workflow filename rather than branch/ref/environment.
View on MITRE ATT&CK