Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

coralogix

GitHub Action Supply Chain Attack (CVE-2025-30066)

Mar 25, 2025 By Hetram Yadav In Coralogix
On March 14, 2025, a critical supply chain attack targeted the widely used GitHub Action tj-actions/changed-files. This action, utilized in over 23,000 repositories, was compromised when attackers injected malicious code, causing CI/CD pipeline secrets to be exposed in GitHub Actions logs. This breach raised serious concerns regarding the security of GitHub Actions and the importance of implementing robust security measures in CI/CD workflows.
Read Post
gitguardian

GitGuardian Report: 70% of Leaked Secrets Remain Active for Two Years, Urging Immediate Remediation

Mar 11, 2025 By GitGuardian In GitGuardian
GitGuardian releases its comprehensive "2025 State of Secrets Sprawl Report," revealing a widespread and persistent security crisis that threatens organizations of all sizes. The report exposes a 25% increase in leaked secrets year-over-year, with 23.8 million new credentials detected on public GitHub in 2024 alone. Most concerning for enterprise security leaders: 70% of secrets leaked in 2022 remain active today, creating an expanding attack surface that grows more dangerous with each passing day.
Read Post
gitguardian

GitGuardian Is Now The Overall Most Installed GitHub Marketplace App

Mar 10, 2025 By Dwayne McDaniel In GitGuardian
We are thrilled to announce that the GitGuardian App has become the most installed application on GitHub's Marketplace. We are proud to have passed this milestone, with over 418K developers and organizations trusting GitGuardian to detect secrets in their shared repositories. GitGuardian is now protecting over 12.7M individual repositories. We have been the number one installed security application for some time, but now we have become the single most utilized app across all categories.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.