Your Security Scanner Was the Weapon: Inside the Trivy Supply Chain Attack

TL;DR: Trivy, the most widely used container scanning action in GitHub Actions, was compromised on...