Trivy under attack again: Widespread GitHub Actions tag compromise secrets

Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.
222 points by jicea 214 days ago socket.dev 79 comments
Summary not yet generated for this article.

Comments (79 of ) ⌛

Loading more comments... ⌛
Scroll down to load more comments
No comments available.
Type to search HN and engineering blog articles
Press Escape to close  |  ↑↓ to navigate  |  Enter to open