The Whistleblower Protection Act (PPD-19) protects employees from direct retaliation for acts of reporting protected disclosures. It does NOT protect employees who unlawfully disclose classified information. Report questionable government activity to your supervisor or your organization's security officer. If you are not comfortable reporting to these sources, other avenues are available including the DOD Senior Intelligence Oversight Official, the DOD Inspector General, the US Attorney General, and the DOD Hotline.
Consider these resources for more information: