Back

If you use the tj-actions/files-changed GitHub Action, there was a compromise of the repo detected last week that caused CI/CD secrets to leak into (on public repos) publicly available log files.

https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised

https://github.com/advisories/GHSA-mrrh-fwg8-r2c3