Aquasecurity Setup-Trivy vulnerabilities

CVE-2026-33634 [HIGH] CWE-506 CVE-2026-33634: Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publi Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.69.4 release, force-push 76 of 77 version tags in `aquasecurity/trivy-action` to credential-stealing malware, and replace all 7 tags in `aquasecurity/setup-trivy` with malicious commits. This incident is a continuation of the sup