According to a report from Endor Labs, the utility is used in over 23,000 GitHub repositories. The compromised action could impact thousands of CI pipelines, the report said.

Leaking GitHub tokens. Unit 42's report highlights a combination of factors, including insecure default settings, user misconfiguration, and insufficient security checks, that can lead to the ...