Executive brief
Aqua Security's Trivy, a widely used tool for scanning software for security flaws, was compromised in a supply chain attack where malicious code was inserted into official releases and GitHub Actions. If used, this malicious code can steal highly sensitive information from your development environment, including cloud credentials, database passwords, and encryption keys. Organizations must immediately rotate all secrets that may have been exposed and update to verified safe versions of the software.
Technical details
This is a supply chain compromise (CWE-506) where a threat actor used compromised credentials to publish a malicious version of the Trivy binary (v0.69.4) and force-push malicious commits to existing version tags for 'trivy-action' and 'setup-trivy' GitHub Actions. The malicious code is designed to exfiltrate environment variables, SSH keys, and cloud provider tokens from the CI/CD runner to an attacker-controlled repository (often named 'tpcp-docs'). The attack was possible due to non-atomic credential rotation following a previous incident in February 2026. Users are advised to update to Trivy v0.35.0 (action) or v0.69.5+ (binary), rotate all secrets accessible to affected pipelines, and pin GitHub Actions to immutable commit SHAs rather than mutable tags.
Affected products
- Aqua Security Trivy 0.69.4
- Aqua Security trivy-action 0.0.1 - 0.34.2
- Aqua Security setup-trivy 0.2.0 - 0.2.6
Timeline
- 2026-02-01: other: Initial supply chain attack began late February 2026
- 2026-03-01: disclosed: Initial disclosure and secret rotation attempt
- 2026-03-19: exploited: Threat actor published malicious releases using exfiltrated credentials
- 2026-03-26: advisory: CVE-2026-33634 published and added to CISA KEV