StepSecurity Logo
StepSecurity
⌘K

    • Get Started

    • Overview

    • Detections

    • Threat Center

      • Workflow Runs

      • Baseline

      • Suppression Rules

      • Policy Store

      • Self Hosted Runners

      • Installation

    • Action Secrets

    • Apps & PATs

  3. compromised-packages
  5. Install SleeperGem Compromised RubyGems

Jobs

  • Runtime detonation via require (git_credential_manager 2.8.0)
  • Install-time detonation (git_credential_manager 2.8.0)
  • Runtime detonation via require (git_credential_manager 2.8.1)
  • Install-time detonation (git_credential_manager 2.8.1)
  • Runtime detonation via require (git_credential_manager 2.8.2)
  • Install-time detonation (git_credential_manager 2.8.3)
  • Runtime detonation via require (git_credential_manager 2.8.3)
  • Install-time detonation (git_credential_manager 2.8.2)

Runtime detonation via require (git_credential_manager 2.8.3)

Harden-runner policy:
audit
Start time:19 Jul 2026 14:04:48 GMTRunner name:-Duration:2m 16sJob labels:ubuntu-latest
Show:
Show all steps
StepPIDProcessDestinationPortStatus
Setup Rubyruby/setup-ruby@v1
2095nodeGitHubgithub.com443AllowedNot in baseline - learning19 Jul 2026 14:04:55
Setup Rubyruby/setup-ruby@v1
2095nodeGitHubrelease-assets.githubusercontent.com443AllowedNot in baseline - learning19 Jul 2026 14:04:55
Install git_credential_manager 2.8.3
2112rubyRubyGemsindex.rubygems.orgAPI Calls4443AllowedNot in baseline - learning19 Jul 2026 14:04:56
Require the gem with CI env vars stripped
2132rubygit.disroot.orgAPI Calls2443AllowedNot in baseline - learning19 Jul 2026 14:04:57