Results for “"action-setup@v1"”
1–1 of 1 articles
Best match · title matches first
Bleeping Computer
2 years ago
GitHub Action hack likely led to another in cascading supply chain attack
A cascading supply chain attack that began with the compromise of the "reviewdog/action-setup@v1" GitHub Action is believed to have led to the recent breach of "tj-actions/changed-files" that leaked CI/CD secrets. [...]