Alert! The GitHub Action 'tj-actions/changed-files' was compromised, potentially leaking CI/CD secrets from repos. Update to v46.0.1 ASAP & check logs from March 14-15 for unusual output. Supply chain risk strikes again! More info: https://thehackernews.com/2025/03/github-action-compromise-puts-cicd.html #cybersecurity #github #supplychain #newz

Fake-Sicherheitswarnung: Betrüger versuchen Github-Konten zu kapern

Sicherheitsforscher berichten über Angriffsversuche auf rund 12.000 Github-Repositories. Dabei wollen Angreifer die volle Kontrolle über Konten erlangen.

https://www.heise.de/news/Fake-Sicherheitswarnung-Betrueger-versuchen-Github-Konten-zu-kapern-10317643.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

CVE-2025-30066

FTR. #Github Actions using tj-actions before version 46 are vulnerable to a credential stealing attack which can be used to manipulate code. See https://nvd.nist.gov/vuln/detail/CVE-2025-30066

The good news: #Forgejo isn't affected as their implementation of actions works in a way that the attack isn't possible. See https://code.forgejo.org/forgejo/runner/issues/499 for details.

Genuine query

How do I try to get the attention of Mastodon devs to look at a simple QOL & accessibility suggestion about character limits?

https://github.com/mastodon/mastodon/issues/24147

& just to pre-empt the thought, I cannot code, nor have I ever been able to successfully learn, so I cannot offer to contribute to the code.