Tracebit Configure Credentials

Version updated for https://github.com/tracebit-com/tracebit-community-action to version v1.1.1.

  • This action is used across all versions by 4 repositories.

Action Type

This is a Node action using Node version 24.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

This GitHub Action integrates AWS canary credentials and SSH canary keys (honeytokens) into CI/CD pipelines to detect supply chain attacks and credential exfiltration attempts. It provides real-time alerts when the canary credentials are used, enabling teams to quickly identify and respond to compromised workflows or malicious activity. By tagging canaries with pipeline metadata, it offers precise traceability to identify the exact compromised workflow run, addressing threats like malicious dependencies, compromised actions, and insider threats.

What’s Changed