Supply Chain Attack Campaign
A supply chain attack has compromised the official aquasecurity/trivy-action repository, marking the second Trivy-related incident in March following an earlier OpenVSX compromise of the Aqua Trivy VS Code extension. The threat-actor force-pushed 75 out of 76 version tags, replacing legitimate references with a malicious payload designed to harvest secrets inside GitHub Actions runners, including SSH keys, cloud credentials across AWS, GCP, and Azure, and Kubernetes service account tokens. With over 10,000 workflow files referencing this action, the blast radius is significant, and the compromised tags remain live at time of writing.
Ecosystems: actions
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.