supply-chain attack Attack on DevOps: secrets leaked via malicious GitHub Action How to respond to a compromised GitHub changed-files Action incident.
supply-chain attack