From d52b942ee0c535798f0df9e1c05683f8e818c79b Mon Sep 17 00:00:00 2001 From: undefined Date: Sun, 16 Mar 2025 05:18:50 +0000 Subject: [PATCH] add hint to revoke leaked token (#2475) --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index e5a86074..e659abcc 100644 --- a/README.md +++ b/README.md @@ -23,7 +23,7 @@ Effortlessly track all changed files and directories relative to a target branch > This commit has been **removed** from all tags and branches, and necessary measures have been implemented to prevent similar issues in the future. > > #### **Action Required:** -> +> * Double check your all your actions output from Mar 14, under `changed-files` section, if there's a long string, decode it using `echo 'xxx' | base64 -d | base64 -d`, and revoke those token immediately. > * **If your workflows reference this commit directly by its SHA**, you must update them immediately to avoid using the compromised version. > * **If you are using tagged versions** (e.g., `v35`, `v44.5.1`), no action is required as these tags have been updated and are now safe to use.