Skip to content

Commit d3f687c

Browse files
authored
Update README.md
1 parent 7f63df9 commit d3f687c

File tree

1 file changed

+9
-6
lines changed

1 file changed

+9
-6
lines changed

README.md

Lines changed: 9 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -7,9 +7,7 @@ Lists the Actions and specific versions and commits used in them.
77
Optionally, filter by a particular action, possibly including a commit SHA of interest.
88

99
> [!NOTE]
10-
> Not supported by GitHub
11-
12-
(C) Copyright GitHub, Inc.
10+
> This is unofficial software, not supported by GitHub
1311
1412
## Usage
1513

@@ -33,11 +31,12 @@ node audit_workflow_runs.js github org 2025-03-13 2025-03-15 tj-actions/changed-
3331

3432
### find_compromised_secrets.js
3533

36-
This is relevant only to secrets leaked in the `tj-actions/changed-files` or `reviewdog` compromises in March 2025.
34+
> [!NOTE]
35+
> This is relevant only to secrets leaked after the `tj-actions/changed-files` and `reviewdog` compromises in March 2025.
3736
38-
This script takes the output of `audit_workflow_runs.js` and searches for secrets that were leaked in a workflow run.
37+
This script takes the output of `audit_workflow_runs.js` and searches for secrets that were leaked in those workflow runs.
3938

40-
Take the output from the single-line JSON file for any known-compromised Actions and run it through this script.
39+
You should take the output from the single-line JSON file for any known-compromised Actions and run it through this script.
4140

4241
```text
4342
node find_compromised_secrets.js < <path sljson file>
@@ -53,6 +52,10 @@ node find_compromised_secrets.js < workflow_audit_results.sljson
5352

5453
## Changelog
5554

55+
### 2025-05-20 18:15Z
56+
57+
Added script to allow decoding secrets from workflows affected by a particular set of compromises in March 2025.
58+
5659
### 2025-05-20 15:10Z
5760

5861
Made searching for Actions downloads more efficient. The search now stops after any consecutive lines seen that show an Action was downloaded, and avoids searching the rest of the log file.

0 commit comments

Comments
 (0)