GitHub ‘Verified’ Commits Can Be Rewritten Into New Hashes Without Breaking Signatures
New research from Carnegie Mellon University PhD student Jacob Ginesin, also a cryptographic auditor at Cure53, reveals that GitHub's 'Verified' commit badge…
Tag: tj-actions/changed-files
tj-actions/changed-files: GitHub Action for Changed Files
tj-actions/changed-files is a GitHub Action used to detect file changes in pull requests. It was compromised in a 2025 tag hijack attack,…