Development · Articlepublished 3d
Rust Security Team warns Miri caches can expose CI secrets to pull requests
The Rust Security Response Team says Miri persisted all environment variables under target/, creating a secret-exposure path when GitHub Actions jobs both supplied secrets and cached that directory for later pull-request runs. A narrowing patch is merged for the 22 September nightly; maintainers are advised to clear affected caches and rotate credentials that may have been exposed.