Skip to content
[CVE-2025-30066] Get the TL;DR: tj-actions/changed-files Supply Chain Attack
aikido.dev | incident | CVE-2025-30066 | #supply-chain | #incident-response | #github-actions | #ci-cd | #supply-chain-attack | #cicd | #secrets-leakage | #cve-2025-30066 | #tj-actions
Summary
The tj-actions/changed-files GitHub Action, which is currently used in over 23,000 repositories, has been compromised, leaking secrets through workflow logs and impacting thousands of CI pipelines.
- Published
- Collected