Trivy 0.70.0: post-incident, one silent CI break
Trivy 0.70.0 is the first release after the March supply chain incident. New features landed, but the rotated GPG key for deb/rpm will silently break CI.
Trivy
1 article tagged #trivy
1 article tagged #trivy
Trivy 0.70.0 is the first release after the March supply chain incident. New features landed, but the rotated GPG key for deb/rpm will silently break CI.