When Your Scanner Steals Your Keys: Hardening CI/CD After the Trivy Attack
A supply chain attack turned Trivy, a popular security scanner, into a credential stealer inside CI/CD pipelines. How to harden for all three stages, preventing the compromise, limiting the damage, and recovering fast.