Trivy vulnerability scanner breach pushed infostealer via GitHub Actions

Widely used Trivy scanner compromised in ongoing supply-chain attack

An experiment to use GitHub Actions as a control plane for a PaaS

GitHub Actions is slowly killing engineering teams