all tags
The Team PCP Snowball Effect: A Quantitative Analysis

The Team PCP Snowball Effect: A Quantitative Analysis

Supply chain attacks cascade through ecosystems in ways traditional metrics hardly capture. GitGuardian evaluates the PCP Team incidents and finds damage spread to thousands of public targets.

Trivy’s March Supply Chain Attack Shows Where Secret Exposure Hurts Most

Trivy’s March Supply Chain Attack Shows Where Secret Exposure Hurts Most

The Trivy story is moving quickly, and the latest reporting makes one thing clear: this is no longer just a GitHub Actions tag hijack. What started as a compromise of trivy-action, setup-trivy, and the v0.69.4 release has expanded into malicious Docker Hub images.

Start your journey to secrets-free source code

And keep your secrets out of sight