{"id":340,"date":"2026-03-20T19:10:04","date_gmt":"2026-03-20T19:10:04","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=340"},"modified":"2026-03-20T19:10:04","modified_gmt":"2026-03-20T19:10:04","slug":"trivy-security-scanner-github-actions-breached-75-tags-hijacked-to-steal-ci-cd-secrets","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=340","title":{"rendered":"Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI\/CD Secrets"},"content":{"rendered":"
\n
<\/a><\/div>\n

Trivy, a popular open-source vulnerability scanner maintained by Aqua Security, was compromised a second time within the span of a month to deliver malware that stole sensitive CI\/CD secrets.<\/p>\n

The latest incident impacted GitHub Actions \u00abaquasecurity\/trivy-action<\/a>\u00bb and \u00abaquasecurity\/setup-trivy<\/a>,\u00bb which are used to scan Docker container images for vulnerabilities and set up GitHub Actions workflow with a specific version of the scanner, respectively.<\/p>\n

\u00abWe identified that an attacker force-pushed 75 out of 76 version tags in the aquasecurity\/trivy-action repository, the official GitHub Action for running Trivy vulnerability scans in CI\/CD pipelines,\u00bb Socket security researcher Philipp Burckhardt said<\/a>. \u00abThese tags were modified to serve a malicious payload, effectively turning trusted version references into a distribution mechanism for an infostealer.\u00bb<\/p>\n

The payload executes within GitHub Actions runners and aims to extract valuable developer secrets from CI\/CD environments, such as SSH keys, credentials for cloud service providers, databases, Git, Docker configurations, Kubernetes tokens, and cryptocurrency wallets.<\/p>\n

\n
\"Cybersecurity\"<\/a><\/div>\n<\/div>\n

The development<\/a> marks the second supply chain incident involving Trivy. Towards the end of February and early March 2026, an autonomous bot called hackerbot-claw exploited a \u00abpull_request_target\u00bb workflow to steal a Personal Access Token (PAT), which was then weaponized to seize control of the GitHub repository, delete several release versions, and push two malicious versions of its Visual Studio Code (VS Code) extension to Open VSX.<\/p>\n

<\/p>\n

The first sign of the compromise was flagged<\/a> by security researcher Paul McCarty after a new compromised release (version 0.69.4) was published to the \u00abaquasecurity\/trivy\u00bb GitHub repository. The rogue version has since been removed. According to Wiz<\/a>, version 0.69.4 starts both the legitimate Trivy service and the malicious code responsible for a series of tasks –<\/p>\n