tj-actions/changed-files

mentions 3 type Organization feed RSS

// recent coverage 3 mentions

00:33

2026-09-04

dev.to

ai-safety

The Pipeline Became the Attack Surface: What the 2026 CI/CD Shifts Mean for Reliability

A 2025 supply-chain attack on the popular tj-actions/changed-files GitHub Action compromised over 23,000 repositories, prompting GitHub to outline a 2026 security roadmap that includes pinning all act…

13:08

2026-08-17

sourcefeed.dev

ai-safety

Your LLM Writes GitHub Actions Like It's 2022

A 2026 arXiv audit of real-world Java workflows found only 4% compliance with least-privilege permission controls, and model-generated GitHub Actions workflows often inherit over-permissive habits fro…

07:17

2026-06-12

dev.to

ai-tools

A zero-dep CLI that scans your GitHub Actions for the mistakes that actually get repos compromised

A developer built actionsec, a zero-dependency CLI tool that scans GitHub Actions workflows for security vulnerabilities like unpinned action tags and script injection risks. The tool runs via `npx ac…

// co-occurs with top 8 entities

GitHub 3 CVE-2025-30066 2 actionsec 1 reviewdog 1 Ji-ho Choi 1 CISA 1 arXiv 1 Wiz 1

// topics top 4 topics

ai safety 3 developer tools 2 ai tools 1 ai policy 1