devtake.dev
AI Apple Hardware Policy Open Source security

#supply-chain

Trivy logo, the open-source vulnerability scanner from Aqua Security
security·

Trivy got hijacked: 75 of 76 version tags rewrote to drop a CI secret-stealer

Attackers force-pushed 75 of 76 trivy-action tags to a malicious commit. Pinning by tag turned a trusted scanner into an infostealer for CI pipelines.