More details have come to light on the recent supply chain attack targeting GitHub Actions, including its root cause.

The compromise of GitHub Action tj-actions/changed-files has impacted only a small percentage of the 23,000 projects using it ...

Researchers have determined that Coinbase was the primary target in a recent GitHub Actions cascading supply chain attack ...

Researchers say compromised tool in the GitHub CI/CD environment stole credentials; infosec leaders need to act immediately.

GitHub Action tj-actions/changed-files was compromised, leaking CI/CD secrets. Users must update immediately to prevent ...

CISA warns of CVE-2025-30066, a GitHub supply chain attack exposing secrets via compromised actions logs. Update ...