tj-actions
Security incidents tagged tj-actions. Newest first.
0 tj-actions incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 581
- Longest quiet run: 581 days (Mar 21–Oct 22)
Show 1 older incident1 older incident
March 2025 1
- CriticalPatched
tj-actions/changed-files compromised: CI secrets dumped in 23,000+ repos' logs
Attackers repointed the version tags of the popular tj-actions/changed-files GitHub Action to a commit that dumped runner memory, printing CI/CD secrets into workflow logs. It started with the compromise of reviewdog/action-setup and was aimed at Coinbase's agentkit repo first. Over 23,000 repositories used the action.
tj-actions/changed-files GitHub ActionClosed Mar 20, 2025
