Jan 162026 AWS CodeBuild Misconfiguration Exposed GitHub Repos to Potential Supply Chain Attacks A misconfigured AWS CodeBuild webhook allowed bypass of actor ID checks, risking takeover of four AWS GitHub repositories before fixes in Sep 2025.