Tektoncd Pipelines-as-code vulnerabilities
- tektoncd pipelines-as-code Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution 6.5 Medium
- tektoncd pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header 8.2 High