https://grafana.com/blog/2025/04/27/grafana-security-update-no-customer-impact-from-github-workflow-vulnerability/
Grafana 最近遇到關於 GitHub Action 中有一些漏洞，導致有人可以獲得一些 secret，不過團隊透過 alert 馬上觀察到這個現象並且趕緊修復
Grafana Labs
Grafana security update: no customer impact from GitHub workflow vulnerability | Grafana Labs
On April 26, an unauthorized user exploited a vulnerability with a GitHub workflow to gain unauthorized access to tokens, all of which have now been invalidated. At this time, our investigation has found no evidence of code modifications, unauthorized access…
April 28, 2025 820 2
