Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
mixologic
on March 15, 2025
|
parent
|
context
|
favorite
| on:
Tj-actions/changed-files GitHub Action Compromised...
All the version tags got relabled to point to a compromised hash. Semver does nothing to help with this.
your build should always use hashes and not version tags of GHA's
Consider applying for YC's Fall 2026 batch!
Applications
are open till July 27.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
your build should always use hashes and not version tags of GHA's