GitHub Actions Leaking Secrets When Miri Output Is Cached
By BIOS Founding Team
The Rust Security Response Team disclosed that Miri writes all environment variables into target/, meaning secrets present as env vars can leak into GitHub Actions caches later readable by pull requests, including from contributors with no other repo write access.
A short-term fix landed in nightly, and the team recommends disabling caching for Miri jobs or rotating any potentially exposed secrets.
Full details: https://blog.rust-lang.org/2026/09/21/github-actions-leaking-secrets-when-miri-output-is-cached/
More from the community
Terraform v1.16.4
The latest patch on the 1.16 stable line, fixing rendering of policy evaluation outcomes against older Terraform Enterprise versions and a deferred-error bug triggered when a provider returns a deferral for a resource...
Terraform v1.17.0-beta2
The second beta of 1.17 carries forward the Policy GA, provider-requirement variables and locals, and -minimal-refresh features from beta1.
Python Documentation Now Available in Persian
The official CPython documentation is now available translated into Persian, the result of community translator effort, joining the growing list of localized doc sets.