Hacker News
new
top
best
ask
show
job
Two compromised GitHub Actions have been reenabled
(
socket.dev
)
2 points
by
justsomehuman
an hour ago
1 comment
justsomehuman
an hour ago
So these two compromised GitHub Actions, actions-cool/issues-helper and actions-cool/maintain-one-comment with malicious tags in tact have been inexplicably reenabled within the past week. Exposing dependant repos to Mini Shai-Hulud.