Supply Chain Attack on GitHub Action Exposes CI/CD Credentials

A supply chain attack has compromised the GitHub Action 'actions-cool/issues-helper', exposing sensitive CI/CD secrets. The attacker manipulated Git tags, redirecting them to an imposter commit (1c9e803) without altering the visible commit history. This method allows the attacker to gain access to workflow credentials, potentially affecting numerous repositories that utilize this action. The incident highlights vulnerabilities in CI/CD processes and the importance of securing third-party integrations. As of now, the full scope of the impact is still being assessed, but users are advised to review their workflows for potential exposure.

Key Points: • The GitHub Action 'actions-cool/issues-helper' was compromised in a supply chain attack. • Attackers redirected Git tags to an imposter commit to steal CI/CD credentials. • Users are urged to review their workflows for potential exposure to this vulnerability.