#tokentheft

Attackers used a stolen GitHub token to download Grafana's full codebase and demanded a ransom. Grafana refused. Here's what happened and what it means for your CI/CD pipeline.