1. Compromised GitHub action codfish/semantic-release-action steals CI/CD secrets blog | 2026-06-24 00:00 | aikido.dev | original ↗ | #supply-chain | #devsecops | #secrets