76 of 77 trivy-action tags repointed to a credential stealer overnight

On March 19, 2026, an attacker with stolen credentials force-pushed 76 of 77 version tags on aquasecurity/trivy-action and all 7 tags on setup-trivy to point at a credential stealer that read secrets from runner memory. Only the immutable 0.35.0 release stayed clean, and some SHA-pinned workflows were exposed because the pinned action called setup-trivy by tag.

• 76 of 77 trivy-action tags and all 7 setup-trivy tags were repointed to a stealer
• Malicious code ran for about 12 hours, roughly 17:43 to 05:40 UTC
• Only the immutable 0.35.0 release tag remained clean
• SHA pinning failed when the pinned action called a dependency by tag