@chaospatterns@lemmy.world to

Programming@programming.devEnglish • 2 months ago

Popular GitHub Action tj-actions/changed-files is compromised with a payload that appears to attempt to dump secrets

3

58

Popular GitHub Action tj-actions/changed-files is compromised with a payload that appears to attempt to dump secrets

@chaospatterns@lemmy.world to

Programming@programming.devEnglish • 2 months ago

3

Semgrep | 🚨 Popular GitHub Action tj-actions/changed-files is compromised

Popular GitHub Action tj-actions/changed-files has been compromised with a payload that appears to attempt to dump secrets, impacting thousands of CI pipelines.

You must log in or register to comment.

HotTopNewOld

Chat

@bleistift2@sopuli.xyz
link
fedilink
English
-6•2 months ago
PrOtEcTiNg ThE sUpPlY cHaIn Is ImPoRtAnT tO uS. tHeReFoRe We NoW fOrCe 2Fa On YoU.
- @StripedMonkey@lemmy.zip
  link
  fedilink
  1•1 month ago
  2fa isn’t a panacea and won’t solve every problem. It does help though. Why do you think supply chain integrity isn’t something they care about?

Programming@programming.dev

!programming@programming.dev

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !programming@programming.dev

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person’s post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

Follow the programming.dev instance rules
Keep content related to programming in some way
If you’re posting long videos try to add in some form of tldr for those who don’t want to watch videos

Wormhole

Follow the wormhole through a path of communities !webdev@programming.dev

12 users / day
168 users / week
455 users / month
1.73K users / 6 months
1 subscriber
2.08K Posts
31K Comments
Modlog