My project: Hermes IDE | GitHub


Me: gabrielanhaia






Trivy is a vulnerability scanner. Its whole job is finding security problems in other people's code.

On March 22, 2026, it became one.

Not a metaphor. Not an exaggeration. A threat group tracked as TeamPCP (Mandiant designation UNC6780) compromised Trivy's GitHub Actions workflow,...