#aquasecurity

75 Trivy-Action GitHub Tags Hijacked in Supply Chain Attack

Attackers hijacked 75 tags in Aqua Security's Trivy GitHub Actions to exfiltrate CI/CD secrets, marking the second major breach in a single month.