Trivy Under Attack Again: Widespread GitHub Actions Tag Comp...
socket.dev
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.