Trivy Supply Chain Attack Targets CI/CD Secrets

๐Ÿ“Œ ORIGINAL QUELLE:
๐Ÿ”— darkreading.com

Quelle: Darkreading

A threat actor used the open source security tool to deploy an infostealer into CI/CD workflows and steal cloud credentials, SSH keys, tokens, and other sensitive secrets.