All extensions seem to have been made by a single actor, possibly of Russian origin.
Breakdown of the Trivy GitHub Actions attack, including workflow misconfigurations, token theft, and supply chain exposure.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results