TeamPCP expands: Supply chain compromise spreads from Trivy to Checkmarx GitHub Actions | Sysdig
sysdig.comThe Sysdig Threat Research Team (TRT) reveals how TeamPCP’s supply chain attack spread from Trivy to Checkmarx, reusing stolen CI/CD credentials to compromise GitHub Actions and evade traditional detection.
Cooldown periods for package updates
Personal site of Marek Šuppa — writing, teaching, and learning.