Skip to main content

New: Meet Apex, the agent that runs your security program while you sleep

Blog

The Cantina blog

Research, perspectives, and field notes on where security is heading.

The Loop

How One Compromised GitHub Action Leaked Thousands of Cloud Secrets

Analysis of the tj-actions/changed-files compromise that exposed secrets through mutable GitHub Action tags in 23,000+ repositories.

· Cantina

GitHub Actions Supply Chain Security CVE-2025-30066

Page 5 of 25 · 294 posts