Skip to content

Commit 622d8bc

Browse files
authored
Tags in tj-actions/changed-files are compromised (#3290)
The tags in tj-actions/changed-files action are compromised and are leaking GitHub secrets in repos using the compromised repo. This pins the action to a known good hash. https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised Signed-off-by: Thanh Ha <[email protected]>
1 parent 057341f commit 622d8bc

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

.github/workflows/link_checkPR.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818

1919
- name: Get Changed Files
2020
id: changed-files
21-
uses: tj-actions/changed-files@v41
21+
uses: tj-actions/changed-files@d6e91a2266cdb9d62096cebf1e8546899c6aa18f # v45.0.6
2222

2323
- name: Check for Skip Label
2424
id: skip-label

0 commit comments

Comments
 (0)