Wow, github action suppy chain attack based on a compromised, re-pointed version number.
Check yourself if you're reliant on tj-actions/changed-files.
GitHub suffers a cascading supply chain attack compromising CI/CD secrets
CISA confirms cascading attack from reviewdog to tj-actions…
InfoWorld