Trivy under attack again: Widespread GitHub Actions tag compromise secrets

Trivy, a popular container security scanner, got its GitHub Actions tags compromised in a supply-chain attack, sparking 36 comments and 99 points as users scrambled to verify their builds.