🧰 tj-actions/changed-files

The items that name it 16

• Spectrmachina/Ztrust
  repoas classification.key entities2026-10-22
• Software supply chain security best practices for 2026
  articleas classification.key entities2026-10-21
• GitHub Action tj-actions/changed-files supply chain attack: what you need to know | Endor Labs
  articleas classification.key entities2026-10-16
• The OpenSourceMalware Show #25
  talkas classification.key entities2026-10-15
• How a Misconfigured CI Workflow Became an npm Supply-Chain Compromise | Blog | Endor Labs
  writeupas classification.key entities2026-10-12
• SolarWinds took a nation-state. The next attack just needs an LLM and $5. | Blog | Endor Labs
  articleas affected products2026-09-11

  GitHub Action compromised last year (prior incident cited as example of GitHub Actions as an attack vector).

• [tl;dr sec] #344 - VMs won't contain Cyber-capable Agents, AWS AI Security Analyst, Decompilers vs LLMs
  articleas classification.key entities2026-09-08
• Runtime Security for AWS CodeBuild-Hosted GitHub Actions Runners
  articleas classification.key entities2026-09-02
• GitHub Secret Scanning Public Monitoring for Enterprises: Coverage and Gaps
  articleas classification.key entities2026-07-12
• GitHub Action Canaries
  repoas classification.key entities2026-07-11
• 10 Layers Deep: How StepSecurity Stops TeamPCP's Trivy Supply Chain Attack on GitHub Actions
  writeupas classification.key entities2026-07-02
• StepSecurity Maintained Actions Are Now Free for Public Repos
  articleas affected products2026-07-02

  GitHub Action used by over 23,000 repositories, compromised in March 2025 supply chain attack (CVE-2025-30066)

• New in the Threat Center: Compromised Components, Now Available via API
  articleas classification.key entities2026-06-09
• The complete GitHub Actions security checklist
  articleas affected products2026-05-11

  Action compromised partly via transitive mutable-tag dependency on reviewdog/action-setup.

• Cooldowns.dev
  articleas affected products2026-05-06It is written here as tj-actions/changed-files (GitHub Action).

  GitHub Action

• GitHub Actions Security Pt 1: Attacks & Defenses | Wiz Blog
  articleas affected products2026-04-14

  GitHub Action used in over 22,000 public repositories, compromised March 15, 2025