Multiple high-profile open-source projects, including those from Google, Microsoft, AWS, and Red Hat, were found to leak GitHub authentication tokens through GitHub Actions artifacts in CI/CD ...

GitHub announced on Monday that it expanded its code hosting platform's secrets scanning capabilities for GitHub Advanced Security customers to automatically block secret leaks.

It’s unlikely that GitHub itself was compromised, according to the ubiquitous source code repository’s blog post, since the OAuth tokens in question aren’t stored by GitHub in usable formats ...