CYBERSECURITY
FEATURED ANALYSIS
Reconstructing the TJ Actions Changed Files GitHub Actions Compromise
SOURCE
Blog RSS Feed | Snyk
DATE
READ
1 min read
A critical security exploit in the popular GitHub Action changed-files (tj-actions/changed-files) exposed encrypted secrets in plaintext within GitHub Action logs. This vulnerability, affecting over 23,000 repositories, …
A critical security exploit in the popular GitHub Action changed-files (tj-actions/changed-files) exposed encrypted secrets in plaintext within GitHub Action logs. This vulnerability, affecting over 23,000 repositories, was enabled by orphaned commits and manipulated release tags. Learn how to protect your GitHub workflows from similar exploits.