Skip to content

chore: update tj-actions/changed-files due to cve #4

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Mar 16, 2025
Merged

chore: update tj-actions/changed-files due to cve #4

merged 1 commit into from
Mar 16, 2025

Conversation

lechnerc77
Copy link
Member

Purpose

Pull Request Type

What kind of change does this Pull Request introduce?

[ ] Bugfix
[ ] Feature
[ ] Refactoring (no functional changes, no api changes)
[ ] Documentation content changes
[X] Other... Please describe: Security Vulnerability

Other Information

See also https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised

@lechnerc77 lechnerc77 self-assigned this Mar 16, 2025
@lechnerc77 lechnerc77 added the internal Internal issues label Mar 16, 2025
@lechnerc77 lechnerc77 merged commit 62b06d0 into main Mar 16, 2025
4 checks passed
@lechnerc77 lechnerc77 deleted the cve branch March 16, 2025 13:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@NHingerl NHingerl Awaiting requested review from NHingerl NHingerl is a code owner

@bzarske bzarske Awaiting requested review from bzarske bzarske is a code owner

Assignees

@lechnerc77 lechnerc77

Labels
internal Internal issues
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@lechnerc77