Woodpecker CI 3.19 fixes a flaw that could let matrix settings inject environment variables into the default repository checkout step.
The release a…

Woodpecker CI 3.19 fixes a flaw that could let matrix settings inject environment variables into the default repository checkout step.
The release a…
🚀 Woodpecker 3.19.0 is out!
Take control with server-enforced agent labels and custom shell paths for the local backend.
🔒 Also includes CLI secret masking and a clone-step security fix.
The past few days been experimenting with a #WoodpeckerCI plugin to make it easier to push packages to #forgejo and #codeberg
https://codeberg.org/kfdm/woodpecker-to-forgejo
Have not yet tested and implemented all the package types [1], but should be easy to expand to the rest.
1 […]
CVE-2026-61549 - woodpecker
Versions 1.0.0 through 3.16.0 of Woodpecker let anyone who can push code to a linked repository tell the system to run its build jobs using any service account in…
Too many irrelevant or confusing CVEs? Use stackflag.com
🐝 Woodpecker CI 3.18.1 is here! This patch release squashes bugs: fixed workflow when.status, faster log migration, timezone data in Docker images & improved GitLab group handling. Update now! #WoodpeckerCI #release #opensource #bugfixes