Home / CI/CD Attacks / Defense Evasion > Zuckerpunch - Abusing Self Hosted GitHub Runners at Facebook Defense Evasion > Zuckerpunch - Abusing Self Hosted GitHub Runners at Facebook Hide commits in a GitHub PR. Package GitHub Back to CI/CD Attacks