New answers tagged


If I understand this correctly, normally, the Bamboo server is the one sending code and instructions to the EC2 instances. This means that assuming that there is no remote code exploits in Bamboo that allows the EC2 to command the Bamboo server, then these are the possible things that the attacker can do: Steal source code Return fake test results, ...

Top 50 recent answers are included