tj-actions/changed-files (GitHub Actions)
Advisories
1
Latest version
—
License
—
OpenSSF Scorecard
—
Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-mrrh-fwg8-r2c3 tj-actions changed-files through 45.0.7 allows remote attackers to discover secrets by reading actions logs. Known exploited |
High EPSS 72.09% |
<= 45.0.7 | No fix yet |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor