HNHacker News
TopNewBestAskShowJobs

v1sionSec

1 karma · joined March 15, 2025

submissionscomments
v1sionSec··on Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos
As the repo is was taken down is someone able to tell me when was the malicious commit pushed. Trying to get a timeline to see if any workflows using this action were trigger in that timeframe. Thank you
v1sionSec··on Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos
Thank you, unfortunately we have a multiple of repositories with multiple runs that use this action so checking the logs one by one will be hard. Any idea how to get all logs? Thank you