Analysis · Retrospective 2025
tj-actions: fixing the workflow was only the start of secret recovery
The March 2025 compromise connected mutable action tags, secret-bearing logs and credentials that could outlive the malicious code.
Find a product, vulnerability or security question in the published record.
1 result for CVE-2025-30066.
The March 2025 compromise connected mutable action tags, secret-bearing logs and credentials that could outlive the malicious code.