Trivy GitHub Action

Named by 3 kept items in this workspace.

Search every workspace for Trivy GitHub Action. It matches the name as written, so it can find other things that share it.

The items that name it 3

Prasenjit Sarkar (@stretchcloud) on X
thread2026-10-24It is written here as Trivy GitHub Action (backdoored in the separate March campaign).
backdoored in the separate March campaign
The State of Open Source Supply Chain Attacks
article2026-08-23
76 of its 77 version tags poisoned by Team PCP.
Team PCP Stole 78,330 Secrets From 2,186 Organizations. CloudSEK Just Published the List.
article2026-08-15
76 of 77 version tags injected with a credential stealer by Team PCP in March 2026.

All technologies in this workspace.