PhilipTheBucket@ponder.cat to Cybersecurity@sh.itjust.worksEnglish · 2 months agoGitHub supply chain attack spills secrets from 23K projectsgo.theregister.comexternal-linkmessage-square6linkfedilinkarrow-up138arrow-down12
arrow-up136arrow-down1external-linkGitHub supply chain attack spills secrets from 23K projectsgo.theregister.comPhilipTheBucket@ponder.cat to Cybersecurity@sh.itjust.worksEnglish · 2 months agomessage-square6linkfedilink
minus-squarezero_spelled_with_an_ecks@programming.devlinkfedilinkEnglisharrow-up4·2 months agoAnybody that got bit by this, there’s a drop in replacement at step-security/changed-files They also have a good write-up of the incident https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised that shows how to tell if you were hit.
Anybody that got bit by this, there’s a drop in replacement at step-security/changed-files
They also have a good write-up of the incident https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised that shows how to tell if you were hit.