OUTVIVID Telegram 4688
tj-actions/changed-files 被骇,被骇版本会将 secret 写入运行日志;现已修复。

- 骇客伪装成 Renovate bot 更新了 minify 的 Actions 代码,亦修改了所有 tag 使其指向恶意 commit。
- 维护者称原因是自己的一个 PAT (Personal Access Token) 泄露 [1]。

- gh:tj-actions/changed-files#2463
- stepsecurity.io/~

1. gh:tj-actions/changed-files#2464

#Security #GitHubActions



tgoop.com/outvivid/4688
Create:
Last Update:

tj-actions/changed-files 被骇,被骇版本会将 secret 写入运行日志;现已修复。

- 骇客伪装成 Renovate bot 更新了 minify 的 Actions 代码,亦修改了所有 tag 使其指向恶意 commit。
- 维护者称原因是自己的一个 PAT (Personal Access Token) 泄露 [1]。

- gh:tj-actions/changed-files#2463
- stepsecurity.io/~

1. gh:tj-actions/changed-files#2464

#Security #GitHubActions

BY 层叠 - The Cascading


Share with your friend now:
tgoop.com/outvivid/4688

View MORE
Open in Telegram


Telegram News

Date: |

The Channel name and bio must be no more than 255 characters long Telegram has announced a number of measures aiming to tackle the spread of disinformation through its platform in Brazil. These features are part of an agreement between the platform and the country's authorities ahead of the elections in October. Healing through screaming therapy How to create a business channel on Telegram? (Tutorial) Telegram users themselves will be able to flag and report potentially false content.
from us


Telegram 层叠 - The Cascading
FROM American