Cult Of Wire on Telegram: “https://socket.dev/blog/trivy-under-attack-again…”

Cult Of Wire @cultofwire · 949 subscribers

Post #1397 497 Mar 20, 2026, 14:22 UTC

https://socket.dev/blog/trivy-under-attack-again-github-actions-compromise

Trivy в GitHub Action взломали.

Если вы использовали Trivy от 0.18.0 до 0.35.0 - мои поздравления - смена паролей в пятницу вечером вам обеспечена

socket.dev Trivy Under Attack Again: Widespread GitHub Actions Tag Compromise Exposes CI/CD Secrets Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

👏 2
❤ 1

Open in Telegram All posts from @cultofwire