Compromised tj-actions/changed-files GitHub Action exposed CI secrets, per CISA

Summary

CISA reports the popular third-party GitHub Action tj-actions/changed-files (CVE-2025-30066) was compromised, allowing disclosure of secrets including access keys, GitHub PATs, npm tokens and private RSA keys; it was patched in v46.0.1. GitHub's advisory says tags were retroactively pointed to a malicious commit and secrets were printed in Actions logs.

Techniques

Technique-level mapping, an editorial judgment made by the method.

• T1195.002 Compromise Software Supply Chain

MITRE ATT&CK technique IDs and names: © The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. ATT&CK terms of use

Controls

Controls that could prevent, detect, or support recovery from this kind of failure. Mappings are editorial judgments made by the method, not findings about what any party should have done.

NIST AI RMF

Not mapped. AI RMF mapping is optional for cyber incidents.

NIST SP 800-53

• SR-3 Supply Chain Controls and Processes
• SR-11 Component Authenticity
• SI-7 Software, Firmware, and Information Integrity
• IA-5 Authenticator Management

Human-approval (JCR) checkpoint

not applicable

Correlated incidents

Co-occurrence, not cause: each link records something the two incidents share, as its rationale and source state. It does not say one incident caused the other. Links are written on one record; the other record shows the same link marked derived.

• AI AIA-005 Malicious code shipped in Amazon Q Developer VS Code extension 1.84.0, per AWS

  same technique

  Both involve a compromised CI or build pipeline: CISA reports the tj-actions/changed-files GitHub Action was compromised, and AWS says an inappropriately scoped GitHub token in a CodeBuild configuration let the actor commit code that was automatically released.

  Source: aws.amazon.com https://aws.amazon.com/security/security-bulletins/AWS-2025-015/

Sources

• cisa.gov primary link checked 2026-10-31, HTTP 200
  Alert dated Mar 18, 2025. CISA says the compromise was potentially enabled by the compromise of reviewdog/action-setup@v1 (CVE-2025-30154).
  https://www.cisa.gov/news-events/alerts/2025/03/18/supply-chain-compromise-third-party-tj-actionschanged-files-cve-2025-30066-and-reviewdogaction
• github.com primary link checked 2026-10-31, HTTP 200
  GHSA-mrrh-fwg8-r2c3: tags modified to point to malicious commit 0e58ed8; window March 14–15, 2025; says over 23,000 repositories impacted.
  https://github.com/advisories/GHSA-mrrh-fwg8-r2c3

Corrections

No corrections recorded.

To report an error in this entry, see corrections.