DevOps vs SecOps

Automatization is amazing when it works, but it all comes at a cost… You have to be careful…

(URL not missing)

Solution

• While solving Leak Spin challenge, another repository was found in DragonSec’s GitHub page - DCTF1-chall-devops-vs-secops
• The main branch did not have anything interesting, however there was another branch - devops
• The workflow files were using another repository - DragonSecSI/.github
• One of the files in the repository contains the flag - setup.py

Flag

dctf{H3ll0_fr0m_1T_guy}