Commit e8b6f2a
committed
hotfix: remove compromised changed-files action
The `tj-actions/changed-files` GitHub action appears to have been
compromised. For details, see:
- https://semgrep.dev/blog/2025/popular-github-action-tj-actionschanged-files-is-compromised/
- https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised
Apparently, using the action can leak CI secrets, so this commit
removes our only use of the action and replaces it with an equivalent
implementation in shell.
Signed-off-by: Geoffrey M. Oxberry <geoffrey.oxberry@datadoghq.com>1 parent c1be9f0 commit e8b6f2a
1 file changed
+6
-4
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
25 | 25 | | |
26 | 26 | | |
27 | 27 | | |
28 | | - | |
29 | | - | |
30 | | - | |
31 | | - | |
| 28 | + | |
| 29 | + | |
| 30 | + | |
| 31 | + | |
| 32 | + | |
| 33 | + | |
32 | 34 | | |
33 | 35 | | |
34 | 36 | | |
| |||
0 commit comments