TF1 INFO · EN DIRECT - Guerre en Ukraine : Macron appelle à des "actions fortes" si Moscou continue de "refuser la paix" | TF1 INFO[VIDÉO] Le président français a dénoncé dimanche les nouvelles "frappes meurtrières" en Ukraine et appelé à des "actions fortes" si la Russie continue de "refuser la paix". Alors que Moscou joue la montre et oppose des conditions aux propositions de trêve, Volodymyr Zelensky dénonce l'absence de réaction américaine. Suivez les dernières informations. - EN DIRECT - Guerre en Ukraine : Macron appelle à des "actions fortes" si Moscou continue de "refuser la paix" (International). TF1 INFO
Coinbase initially targeted in GitHub Actions Supply Chain Attack.![[ImageSource: Endor Labs]
According to Endor Labs, 218 GitHub repositories are estimated to have exposed their secrets due to the supply chain attack, and a majority of the leaked information includes a "few dozen" credentials for DockerHub, npm and Amazon Web Services (AWS), as well as GitHub install access tokens.
"The initial scale of the supply chain attack sounded scary, considering that tens of thousands of repositories depend on the GitHub Action," security researcher Henrik Plate said.
<https://www.endorlabs.com/learn/blast-radius-of-the-tj-actions-changed-files-supply-chain-attack>
"However, drilling down into the workflows, their runs and leaked secrets shows that the actual impact is smaller than anticipated: 'Only' 218 repositories leaked secrets, and the majority of those are short-lived GITHUB_TOKENs, which expire once a workflow run is completed."](https://nerdculture.de/system/media_attachments/files/114/240/091/413/984/866/original/f06e6943c499199b.jpeg "[ImageSource: Endor Labs]
According to Endor Labs, 218 GitHub repositories are estimated to have exposed their secrets due to the supply chain attack, and a majority of the leaked information includes a \"few dozen\" credentials for DockerHub, npm and Amazon Web Services (AWS), as well as GitHub install access tokens.
\"The initial scale of the supply chain attack sounded scary, considering that tens of thousands of repositories depend on the GitHub Action,\" security researcher Henrik Plate said.
<https://www.endorlabs.com/learn/blast-radius-of-the-tj-actions-changed-files-supply-chain-attack>
\"However, drilling down into the workflows, their runs and leaked secrets shows that the actual impact is smaller than anticipated: 'Only' 218 repositories leaked secrets, and the majority of those are short-lived GITHUB_TOKENs, which expire once a workflow run is completed.\"")
Me demandez pas pourquoi je me retrouve à devoir vendre des 
in all tags for the popular GitHub Action 
️, 23k dependents)
was updated to a commit that injected 
malware into the workflow
, and it’s been given CVE-2025-30066, 
being generated
repos
États-Unis : quand Musk fait peur… à ses propres acheteurs: Donald Trump a affirmé sur sa plateforme Truth Social : « je vais aller acheter une Tesla toute neuve demain matin », et d’inciter ses partisans à faire de même dans l’espoir de freiner la chute de l’action du constructeur de voitures électriques qui a perdu près de la moitié de sa valeur depuis décembre. Car les pitreries… 
se déplacer autrement 
**git-metrics**: A Git extension for tracking metrics about your project within the Git repository.
Supports tracking locally or via GitHub Actions.
Written in Rust!
