chore(deps): Update dawidd6/action-download-artifact action to v6 [SECURITY] by renovate[bot] · Pull Request #806 · Incendo/cloud

renovate · 2026-04-21T20:34:06Z

This PR contains the following updates:

Package	Type	Update	Change
dawidd6/action-download-artifact	action	major	`v3` → `v6`

Artifact poisoning vulnerability in action-download-artifact v5 and earlier

GHSA-5xr6-xhww-33m4

More information

Details

Summary

In versions of dawidd6/action-download-artifact before v6, a repository's forks were also searched by default when attempting to find matching artifacts. This could be exploited by an unprivileged attacker to introduce compromised artifacts (such as malicious executables) into a privileged workflow context, as creating a fork requires no privileges.

Users should immediately upgrade to v6 or newer, which changes the default behavior to avoid searching forks for matching artifacts. Users who cannot upgrade should explicitly set allow_forks: false to disable searching forks for artifacts.

Details

GitHub's artifact storage for workflows does not natively distinguish between artifacts created by a repository and artifacts created by forks of that repository. As a result, attempting to retrieve the "latest" artifact for a workflow run can return artifacts produced by a fork, rather than its upstream.

Because any GitHub user can create a fork of a public repository, this allows for artifact poisoning in the following scenarios (as well as potentially others):

Repository alice/foo runs build.yml, producing build.exe
Repository alice/foo runs publish.yml, which uses action-download-artifact@v5 to retrieve the latest build.exe from build.yml

To compromise publish.yml in this scenario, Mallory forks alice/foo to mallory/foo, and then modifies build.yml to produce a compromised build.exe. Mallory can then repeatedly trigger their copy of build.yml to ensure that their compromised build.exe is always the latest artifact, meaning that Alice's publish.yml will retrieve it.

Additional details on this vulnerability can be found in this blog post from 2022:

https://www.legitsecurity.com/blog/artifact-poisoning-vulnerability-discovered-in-rust

Impact

This vulnerability impacts all repositories on GitHub that use action-download-artifacts@v5 or older and do not disable allow_forks: true, which is the default.

If a repository is affected, the severity ranges from downstream contamination (such as publishing attacker-controlled artifacts) to direct workflow compromise (if the retrieved artifact is then executed in a privileged workflow context, such as push or pull_request_target).

Severity

CVSS Score: 8.7 / 10 (High)
Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

Release Notes

dawidd6/action-download-artifact (dawidd6/action-download-artifact)

What's Changed

VERSIONING CHANGE: now there will only be major releases of this action, e.g. v5, v6 and so on
build(deps): bump undici from 5.28.3 to 5.28.4 by @dependabot in #284
build(deps): bump @actions/artifact from 2.1.4 to 2.1.5 by @dependabot in #285
build(deps): bump @actions/artifact from 2.1.5 to 2.1.7 by @dependabot in #287
build(deps): bump adm-zip from 0.5.12 to 0.5.13 by @dependabot in #289
Set allow_forks to false by default by @timweri in #290