Trivy Scanner Compromised in Supply Chain Attack

Trivy, an open-source security scanner, was compromised in March 2026. Credentials stolen from Trivy were used to compromise Checkmarx KICS actions.