chaospatterns@lemmy.world to Programming@programming.devEnglish · 26 days agoPopular GitHub Action tj-actions/changed-files is compromised with a payload that appears to attempt to dump secretssemgrep.devexternal-linkmessage-square3fedilinkarrow-up159arrow-down10cross-posted to: hackernews@lemmy.bestiver.se
arrow-up159arrow-down1external-linkPopular GitHub Action tj-actions/changed-files is compromised with a payload that appears to attempt to dump secretssemgrep.devchaospatterns@lemmy.world to Programming@programming.devEnglish · 26 days agomessage-square3fedilinkcross-posted to: hackernews@lemmy.bestiver.se
minus-squareStripedMonkeylinkfedilinkarrow-up1·9 days ago2fa isn’t a panacea and won’t solve every problem. It does help though. Why do you think supply chain integrity isn’t something they care about?
2fa isn’t a panacea and won’t solve every problem. It does help though. Why do you think supply chain integrity isn’t something they care about?