Hacker News
- Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised 296 comments
- CI/CD supply chain attack on Azure Karpenter Provider open-source project https://www.stepsecurity.io/case-studies/azure-karpenter-provider 2 comments