On Saturday, April 26, 2025, an unauthorized user leveraged a vulnerability in a Github workflow within a public Grafana Labs repository, resulting in the exposure of a small number of secrets.
Our detections immediately triggered alerts.
The Grafana team responded, mitigated the vulnerability, rotated keys and verified there was no access to production systems or data.
We'll follow up with more information on our blog in the next few days.