There is a silly problem which is there, nevertheless.
UPD: Turned out, Github DOES NOT allow this trick. I verified that it works in Gitlab, though.
I don’t like to write about proprietary software (which Gitlab, mostly, is). Nevertheless, the pain and discomfort is there, so, I’m writing down clever tricks of avoiding pain.
I’d like to present the alternative approach to solving endless struggle with ‘deliver CI credentials in a safe and ergonomic way’.
Getting reverse shell into any CI, Dorker container inlcuded