Get the latest tech news

Trivy under attack again: Widespread GitHub Actions tag compromise secrets


Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

None

Get the Android app

Or read this on Hacker News

Read more on:

Photo of attack

attack

Photo of Trivy

Trivy

Related news:

News photo

Supply Chain Attack on Trivy

News photo

Trivy vulnerability scanner breach pushed infostealer via GitHub Actions

News photo

Widely used Trivy scanner compromised in ongoing supply-chain attack