Threat actors abused trusted Trivy distribution channels to inject credential‑stealing malware into CI/CD pipelines worldwide ...
We must reduce the burden on traditional CI systems by bringing more testing and validation closer to the developer, be it human or agent-based.