Socket @SocketSecurity@fosstodon.org
Public

🚨 Trivy update: maintainers confirm this attack used a compromised credential carried over from the breach in early March.

We’ve updated our analysis with full details on how 75 GitHub Action tags were poisoned and used to exfiltrate secrets during CI runs.

socket.dev/blog/trivy-under-at

Trivy Under Attack Again: Widespread GitHub Actions Tag Comp...

Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

socket.dev · Socket

0
0
0

If you have a fediverse account, you can quote this note from your own instance. Search https://fosstodon.org/users/SocketSecurity/statuses/116262741638717245 on your instance and quote it. (Note that quoting is not supported in Mastodon.)