GitHub Actions supply chain attack: tj-actions/changed-files and reviewdog/action-setup
Secrets leaked via compromised CI componentsGitHub Actions, CI/CD, Supply chain compromise, Secrets exposure, DevSecOps, CVE-2025-30066, CVE-2025-30154, tj-actions, reviewdog, Software supply chain security 1. Executive Summary A supply chain compromise impacted…