Trivy Supply Chain Attack Expands to Compromised Docker Images
socket.devMentioned by both
Trivy (aquasecurity) (84 points, 3 days ago, 30 comments) https://news.ycombinator.com/item?id=47450142
Wiz (3 points) https://www.wiz.io/blog/trivy-compromised-teampcp-supply-cha...
this reads like new development
It tries to, and it's not.