GitHub suffers a cascading supply chain attack compromising CI/CD secrets

Discussion on tj-actions (265 points, 4 days ago, 302 comments) https://news.ycombinator.com/item?id=43367987