Skip to content

Compromised GitHub Actions Database

ActionScope ships a curated database of GitHub Actions with documented supply-chain compromises. This page is the canonical browsable view of every entry — each one has its own permalink, so you can deep-link from advisories, incident-response runbooks, or post-mortems.

To check whether your repository uses any of these actions:

pip install actionscope
actionscope scan .

Mutable-tag references to a compromised action (e.g. @v3 of actions-cool/issues-helper) produce a CRITICAL finding. Full-SHA pins to an action that has been compromised but where the specific SHA is not in the published affected-refs list produce a HIGH finding so a human can confirm whether the pinned commit predates the compromise.

For background on how detection works, see Compromised Actions detector.

actions-cool/issues-helper

All version tags redirected to imposter commit. Malicious code reads Runner.Worker process memory to exfiltrate CI/CD secrets. Exfiltration domain: t.m-kosche[.]com.

Are you affected?

# Scan your repo for *this* compromised action:
actionscope scan . | grep -A 5 'actions-cool/issues-helper'

Remediation

  1. Remove the action from your workflow, OR
  2. Pin to a verified pre-compromise SHA if one exists (consult the advisory linked above).
  3. Rotate any credentials the workflow had access to during the compromised window. Treat the compromise window as a credential disclosure.

actions-cool/maintain-one-comment

All 15 version tags redirected to imposter commit. Same exfiltration technique and domain as issues-helper. Coordinated attack.

Are you affected?

# Scan your repo for *this* compromised action:
actionscope scan . | grep -A 5 'actions-cool/maintain-one-comment'

Remediation

  1. Remove the action from your workflow, OR
  2. Pin to a verified pre-compromise SHA if one exists (consult the advisory linked above).
  3. Rotate any credentials the workflow had access to during the compromised window. Treat the compromise window as a credential disclosure.

aquasecurity/trivy-action

Official trivy-action and setup-trivy GitHub Actions compromised alongside Trivy scanner binary. Injected credential-stealing malware.

Are you affected?

# Scan your repo for *this* compromised action:
actionscope scan . | grep -A 5 'aquasecurity/trivy-action'

Remediation

  1. Remove the action from your workflow, OR
  2. Pin to a verified pre-compromise SHA if one exists (consult the advisory linked above).
  3. Rotate any credentials the workflow had access to during the compromised window. Treat the compromise window as a credential disclosure.

tj-actions/changed-files

All version tags redirected to malicious commit. Exfiltrated secrets via workflow logs. Affected 23,000+ repositories.

Are you affected?

# Scan your repo for *this* compromised action:
actionscope scan . | grep -A 5 'tj-actions/changed-files'

Remediation

  1. Remove the action from your workflow, OR
  2. Pin to a verified pre-compromise SHA if one exists (consult the advisory linked above).
  3. Rotate any credentials the workflow had access to during the compromised window. Treat the compromise window as a credential disclosure.

Reporting a new compromise

Found a compromised action that is not on this list? Please open an issue using the report template so we can add it.