The Trivy Attack Revealed a Blind Spot in Every Secrets Manager

How the Trivy supply chain attack harvested credentials from secrets managers

Trivy v0.69.4 silently harvested credentials from thousands of CI/CD pipelines. The secrets managers didn
10 points by Rial_Labs 196 days ago vaultproof.dev 5 comments
Summary not yet generated for this article.

Comments (5 of ) ⌛

Loading more comments... ⌛
Scroll down to load more comments
No comments available.
Type to search HN and engineering blog articles
Press Escape to close  |  ↑↓ to navigate  |  Enter to open