Please Read About the Trivy Compromise https://arstechnica.com/security/2026/03/widely-used-trivy-scanner-compromised-in-ongoing-supply-chain-attack/ and rotate any static credentials in your CI if you use Trivy!