Semgrep | 🚨 Popular GitHub Action tj-actions/changed-files is compromised
semgrep.dev
Popular GitHub Action tj-actions/changed-files has been compromised with a payload that appears to attempt to dump secrets, impacting thousands of CI pipelines.
  • bleistift2@sopuli.xyzEnglish
    17·
    2 months ago

    PrOtEcTiNg ThE sUpPlY cHaIn Is ImPoRtAnT tO uS. tHeReFoRe We NoW fOrCe 2Fa On YoU.

    • StripedMonkey@lemmy.zip
      1·
      1 month ago

      2fa isn’t a panacea and won’t solve every problem. It does help though. Why do you think supply chain integrity isn’t something they care about?