aquasecurity/trivy-action
GitHub Actions · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Trivy ecosystem supply chain was briefly compromised | aquasecurity/setup-trivyaquasecurity/trivy-action | GitHub ActionsGo | Critical | Fix reported | |
| Trivy Action has a script injection via sourced env file in composite action | aquasecurity/trivy-action | GitHub Actions | Medium | Fix reported |