Skip to main content

March 21, 2025

Compromise of tj-actions/changed-files GitHub Action, CVE-2025-30066

What this article record gives an agent

This record adds what an agent needs to use it: a short summary it can quote and the companies resolved to their records.

A summary it can quote

Our short summary, marked as ours, separate from the publisher's own words and byline.

Companies, resolved

Who the article is about and who it names, each linked to a company record, not just a name in text.

Get this article

The same record, three ways in. No key needed to try it.

MCP

curl -X POST https://mcp.decisioninsights.ai/api/mcp-public \
  -H "content-type: application/json" \
  -H "accept: application/json, text/event-stream" \
  -d '{"id":1,"jsonrpc":"2.0","method":"tools/call","params":{"arguments":{"uuid":"a9957c61-9dfd-4de7-a02a-56d33a16308e"},"name":"di_get_content"}}'

REST

GET https://api.decisioninsights.ai/api/public/v1/content/a9957c61-9dfd-4de7-a02a-56d33a16308e

Connect your agent (MCP) REST API and CLI docs

How an agent can check this article before citing it

The check What the record shows Where it is in the data
The companies are real GitHub, Cybersecurity and Infrastructure Security Agency (CISA), StepSecurity and Wiz, each a record of its own about, mentions
Whose words are whose Summary by Decision Insights; the original keeps its own byline author, publisher
View the raw record (JSON-LD) 
[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "legalName": "Wiretap Labs, LLC",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/compromise-of-tj-actions-changed-files-github-action-cve-2025-30066/",
        "name": "Compromise of tj-actions/changed-files GitHub Action, CVE-2025-30066",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/compromise-of-tj-actions-changed-files-github-action-cve-2025-30066/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@id": "https://decisioninsights.ai/registry/microsoft/github/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/microsoft/github/",
      "name": "GitHub"
    },
    "articleSection": [
      "Cybersecurity",
      "AI infrastructure"
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-coverage/#person",
      "@type": "Person",
      "name": "Decision Insights Coverage",
      "url": "https://decisioninsights.ai/author/decision-insights-coverage/"
    },
    "dateModified": "2026-08-23T13:38:26-06:00",
    "datePublished": "2025-03-21T11:11:08-06:00",
    "description": "CVE-2025-30066 affects tj-actions/changed-files GitHub Action, leading to disclosures of sensitive information. Patch available.",
    "headline": "Compromise of tj-actions/changed-files GitHub Action, CVE-2025-30066",
    "keywords": [
      "Known Exploited Vulnerabilities",
      "Tokens"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/compromise-of-tj-actions-changed-files-github-action-cve-2025-30066/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
        "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
      },
      {
        "@id": "https://decisioninsights.ai/registry/microsoft/github/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/microsoft/github/",
        "name": "GitHub"
      },
      {
        "@id": "https://decisioninsights.ai/registry/stepsecurity/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/stepsecurity/",
        "name": "StepSecurity"
      },
      {
        "@id": "https://decisioninsights.ai/registry/google-cloud-platform-gcp/wiz/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/google-cloud-platform-gcp/wiz/",
        "name": "Wiz"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-coverage/#person",
    "@type": "Person",
    "description": "Blog posts, podcasts, and video analysis from across the industry, condensed into short, sourced summaries. Produced under our Standards & Methodology.",
    "name": "Decision Insights Coverage",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-coverage/"
  }
]