Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
Wiz says a GitHub Actions workflow injection in Snowflake's .NET connector repo exposed a Jira API token during a five-day window.
More info