The compromised Action prints CI/CD secrets in GitHub Actions build logs.” “If the workflow logs are publicly accessible (such as in public repositories), anyone could potentially read these logs and ...

That commit was designed to print secrets, such as cryptographic keys, to GitHub Actions build logs where they can be read as plain test. The compromised commit contained base64-encoded ...