Widespread Trivvy GitHub Actions Tag Compromise Exposes CI/CD Secrets(socket.dev)
socket.dev
Widespread Trivvy GitHub Actions Tag Compromise Exposes CI/CD Secrets
https://socket.dev/blog/trivy-under-attack-again-github-actions-compromise
1 comments
Earlier discussion: https://news.ycombinator.com/item?id=47449498