Tag: ci-cd-security

Malware Security Announcements AI Engineering Technology Open Source SCA Compliance & SBOM CI/CD

Security

prt-scan: A 5-Phase GitHub Actions Credential Theft Campaign

A throwaway GitHub account submitted 219+ malicious pull requests in a single day, each carrying a 352-line payload that steals CI secrets, injects workflows, bypasses label gates, and scans /proc...

Security

Trivy Supply Chain Compromise: What Happened, What Was Stolen, and How to Respond

A consolidated technical reference for the TeamPCP supply chain attack against Aqua Security's Trivy scanner. Covers the full attack chain from AI-assisted initial breach through credential theft,...