Trivy supply chain compromise via malicious release and retagged GitHub Actions

CVE-2026-33634 tracks a software supply chain compromise affecting Aqua Security's Trivy ecosystem. On 2026-03-19, a threat actor using compromised credentials published a malicious Trivy v0.69.4 release and force-pushed mutable version tags in the official GitHub Actions repositories aquasecurity/trivy-action and aquasecurity/setup-trivy so that workflows resolving those tags executed attacker-controlled code. The affected components were the aquasecurity/trivy Go binary and container image version 0.69.4, aquasecurity/trivy-action versions 0.0.1 through 0.34.2 for 76 of 77 tags, and aquasecurity/setup-trivy versions 0.2.0 through 0.2.6 prior to recreation of 0.2.6 with a safe commit. The incident was described as a continuation of an earlier late-February 2026 compromise in which credential rotation after disclosure was not atomic, potentially allowing the attacker to retain access during the rotation window and reuse valid tokens. The malicious artifacts and retagged actions were used to deliver credential-stealing malware in CI/CD environments.