Because VS Code's vulnerable CI workflow ran once a day, around midnight, the researcher carefully planned a Proof-of-Concept (PoC) exploit in advance, so as to not make any dangerous mistakes ...

The git push --set-upstream command tells a remote repository to create a new branch to support the new branch and commit history that is about to be pushed to it. After performing a push with a --set ...