chaospatterns@lemmy.world to Programming@programming.devEnglish · 1 month agoPopular GitHub Action tj-actions/changed-files is compromised with a payload that appears to attempt to dump secretssemgrep.devexternal-linkmessage-square3fedilinkarrow-up158arrow-down11 cross-posted to: hackernews
arrow-up157arrow-down1external-linkPopular GitHub Action tj-actions/changed-files is compromised with a payload that appears to attempt to dump secretssemgrep.devchaospatterns@lemmy.world to Programming@programming.devEnglish · 1 month agomessage-square3fedilink cross-posted to: hackernews
minus-squarebleistift2@sopuli.xyzlinkfedilinkEnglisharrow-up1arrow-down7·1 month agoPrOtEcTiNg ThE sUpPlY cHaIn Is ImPoRtAnT tO uS. tHeReFoRe We NoW fOrCe 2Fa On YoU.
minus-squareStripedMonkey@lemmy.ziplinkfedilinkarrow-up1·16 days ago2fa isn’t a panacea and won’t solve every problem. It does help though. Why do you think supply chain integrity isn’t something they care about?
PrOtEcTiNg ThE sUpPlY cHaIn Is ImPoRtAnT tO uS. tHeReFoRe We NoW fOrCe 2Fa On YoU.
2fa isn’t a panacea and won’t solve every problem. It does help though. Why do you think supply chain integrity isn’t something they care about?