Gato-x

Latest version: v0.6.0

Safety actively analyzes 683322 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

0.6.0

This version bump includes bug fixes along with improvements to the Runner-on-Runner attack features. The payload only mode is now more flexible because it will create a C2 repository if one is not specified. This will be useful for manual exploitation scenarios and for red teamers who simply want to use the GitHub Actions runner as a C2 implant.

What's Changed
* Bump actions/setup-python from 4 to 5 by dependabot in https://github.com/AdnaneKhan/Gato-X/pull/45
* Bump pypa/gh-action-pypi-publish from 1.10.1 to 1.10.2 by dependabot in https://github.com/AdnaneKhan/Gato-X/pull/39
* Bump psf/black from 24.8.0 to 24.10.0 by dependabot in https://github.com/AdnaneKhan/Gato-X/pull/55
* Bump pypa/gh-action-pypi-publish from 1.10.2 to 1.12.2 by dependabot in https://github.com/AdnaneKhan/Gato-X/pull/59
* Bump softprops/action-gh-release from 2.0.8 to 2.0.9 by dependabot in https://github.com/AdnaneKhan/Gato-X/pull/57
* Fix broken windows RoR and improve attack UX. by AdnaneKhan in https://github.com/AdnaneKhan/Gato-X/pull/61
* Fix inconsistency with environment enumeration by AdnaneKhan in https://github.com/AdnaneKhan/Gato-X/pull/63
* Bump version to 0.6.0 by github-actions in https://github.com/AdnaneKhan/Gato-X/pull/64


**Full Changelog**: https://github.com/AdnaneKhan/Gato-X/compare/v0.5.8...v0.6.0

0.5.8

What's Changed
* Improve Gato-X Release Process by AdnaneKhan in https://github.com/AdnaneKhan/Gato-X/pull/43
* Fix error saving JSON output with empty repo enum results. by AdnaneKhan in https://github.com/AdnaneKhan/Gato-X/pull/42
* Fix issue where single trigger fails check by AdnaneKhan in https://github.com/AdnaneKhan/Gato-X/pull/46
* Fix secrets exfil failure case bug by AdnaneKhan in https://github.com/AdnaneKhan/Gato-X/pull/47


New Contributors
* github-actions made their first contribution in https://github.com/AdnaneKhan/Gato-X/pull/48

**Full Changelog**: https://github.com/AdnaneKhan/Gato-X/compare/0.5.5...v0.5.8

0.5.5

What's Changed
* Fix bugs with MacOS RoR and not respecting the custom workflow filename. by AdnaneKhan in https://github.com/AdnaneKhan/Gato-X/pull/18
* Use multithreading for GraphQL workflow ingestion by AdnaneKhan in https://github.com/AdnaneKhan/Gato-X/pull/19
* Enumerate user owned and collab repos as part of self enum by AdnaneKhan in https://github.com/AdnaneKhan/Gato-X/pull/22
* Improve validation clarity for different token types. by AdnaneKhan in https://github.com/AdnaneKhan/Gato-X/pull/24
* Format all Python files with black and enforce formatting. by AdnaneKhan in https://github.com/AdnaneKhan/Gato-X/pull/35
* Support App tokens for single repo enumeration by AdnaneKhan in https://github.com/AdnaneKhan/Gato-X/pull/37

**Full Changelog**: https://github.com/AdnaneKhan/Gato-X/compare/0.5.4...0.5.5

0.5.4

What's Changed
* Fix user repo enum bug by AdnaneKhan in https://github.com/AdnaneKhan/Gato-X/pull/10
* Fix SH runner false negative by AdnaneKhan in https://github.com/AdnaneKhan/Gato-X/pull/12
* Fix SH Runner False Negative by AdnaneKhan in https://github.com/AdnaneKhan/Gato-X/pull/14
* Update README.md by pswalia2u in https://github.com/AdnaneKhan/Gato-X/pull/15
* Minor Bugfixes and Updates by AdnaneKhan in https://github.com/AdnaneKhan/Gato-X/pull/16
* Bump version to 0.5.4 by AdnaneKhan in https://github.com/AdnaneKhan/Gato-X/pull/17

New Contributors
* pswalia2u made their first contribution in https://github.com/AdnaneKhan/Gato-X/pull/15

**Full Changelog**: https://github.com/AdnaneKhan/Gato-X/compare/0.5.3...0.5.4

0.5.3

What's Changed

* Remove version print in splash. by AdnaneKhan in https://github.com/AdnaneKhan/Gato-X/pull/7
* Update README.md by AdnaneKhan in https://github.com/AdnaneKhan/Gato-X/pull/8
* Fix user enum error and add tests. by AdnaneKhan in https://github.com/AdnaneKhan/Gato-X/pull/9

**Full Changelog**: https://github.com/AdnaneKhan/Gato-X/compare/0.5.2...0.5.3

0.5.2

Links

Releases

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.