#github-actions

The Security Scanner That Tried to Steal Your Secrets

Trivy got popped, then KICS got popped, and the lesson is that version tags are not a security boundary.