Two more GitHub Actions workflows have become the latest to be compromised by credential-stealing malware by a threat actor ...
Hackers have compromised virtually all versions of Aqua Security’s widely used Trivy vulnerability scanner in an ongoing ...
The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed ...
After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...
Trivy attack force-pushed 75 tags via GitHub Actions, exposing CI/CD secrets, enabling data theft and persistence across ...
TeamPCP is the likely cyber threat actor behind attacks on Trivy, Checkmarx, and the LiteLLM AI library — and all signs point ...
A threat actor used the open source security tool to breach CI/CD workflows and steal cloud credentials, SSH keys, and other ...
A new set of compromised Docker images linked to the Trivy supply chain attack has been identified, expanding the impact of ...
Community driven content discussing all aspects of software development from DevOps to design patterns. One of the ongoing challenges DevOps professionals face when developing continuous integration ...
With GitHub Actions, you can build a container app, deploy a web service, publish packages to registries, or automate welcoming new programmers to your open source projects. Or chain them all together ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results