Reconstructing the TJ Actions Changed Files GitHub Actions Compromise

2025-03-17来源 Snyk BlogEnglish
Reconstructing the TJ Actions Changed Files GitHub Actions Compromise
A critical security exploit in the popular GitHub Action changed-files (tj-actions/changed-files) exposed encrypted secrets in plaintext within GitHub Action logs. This vulnerability, affecting over 23,000 repositories, was enabled by orphaned commits and manipulated release tags. Learn how to protect your GitHub workflows from similar exploits.

原文：https://www.a8q9.cn/en/article/reconstructing-the-tj-actions-changed-files-github-actions-compromise-fcb613.html

相关文章