devtake.dev
AI Security Hardware Open Source Policy Apple

#devsecops

RSS
Related: #aqua-security · 1 #cicd · 1 #github-actions · 1 #supply-chain · 1 #teampcp · 1 #trivy · 1
Trivy logo, the open-source vulnerability scanner from Aqua Security
Security·

Trivy got hijacked: 75 of 76 version tags rewrote to drop a CI secret-stealer

Attackers force-pushed 75 of 76 trivy-action tags to a malicious commit. Pinning by tag turned a trusted scanner into an infostealer for CI pipelines.