Mar 192025 CISA Warns of Active Exploitation in GitHub Action Supply Chain Compromise CISA warns of CVE-2025–30066, a GitHub supply chain attack exposing secrets via compromised actions logs. Update tj-actions/changed-files by April 4.