4 ms·
This attack was not mitigated by hash pinning. The setup-trivy action installs the latest version of trivy unless you specify a version.
by cpuguy83 7mo ago
This attack was not mitigated by hash pinning.
The setup-trivy action installs the latest version of trivy unless you specify a version.
- AdrienPoupa 7mo agoOh, I was referring to `aquasecurity/trivy-action` that was changed with a malicious entrypoint for affected tags. Pinned commits were not affected.