The Trivy vulnerability scanner was compromised in a
supply-chain attack by threat actors known as TeamPCP, which
distributed credential-stealing malware through official releases
and GitHub Actions. [...]
Trivy vulnerability scanner breach pushed infostealer via GitHub Actions
Pensée du jour :
Ce que l'homme a fait ,
l'homme peut le défaire.
"No secure path in the world"
