GATO

Summary from the TLDR InfoSec newsletter

Gato is a tool for finding and exploiting vulnerabilities in GitHub pipelines of public and private repositories. It helps security engineers, blue teams, red teamers, and bug bounty hunters detect and prevent attacks using self-hosted runners. The tool requires a GitHub classic PAT for operation. It offers features like code search, enumeration, and automated workflow analysis.