Product
aquasecurity/trivy-action
- First Reported
- Mar 20, 2026
- Latest Reported
- Mar 20, 2026
Reported Context (2)
- A supply chain attack compromised the aquasecurity/trivy-action GitHub Action by force-updating 75 version tags to point to malicious commits that replaced the action entrypoint with an infostealer, putting over 10,000 Trivy GitHub Action Compromise Rewrites 75 Tags to Steal CI/CD Secrets
- On March 19, 2026, aquasecurity/trivy-action — a widely used GitHub Action for running the Trivy vulnerability scanner — was compromised for approximately 12 hours. A credential stealer was injected into the action via StepSecurity Details Second Trivy Compromise Affecting Releases and GitHub Actions
Malware (1)
People (6)
Threat Actors (1)
MITRE ATT&CK (21)
Vendors (4)
Products (4)
Tools (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.