ended6월 30일· 1 sources
Your CI ran code it should not have, and you cannot prove it did not
Why it matters
A few weeks ago someone force-pushed 75 of 76 version tags in aquasecurity/trivy-action. Pipelines that had pinned to a tag — the thing we all tell people to do — pulled credential-stealing code on th...
1
Sources
+0
24h
—
Growth
83d
Active