Tag
aquasecurity
Safeguard articles tagged "aquasecurity" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Vulnerability Analysis
CVE-2026-33634: Aquasecurity Trivy Embedded Malicious Code Vulnerability
CVE-2026-33634 affects Aquasecurity Trivy and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-03-26.
Sep 17, 20263 min read
Vulnerability Analysis
How a Non-Atomic Credential Rotation Let Attackers Take Over 76 Trivy Action Tags
A compromised-credential attack on Aquasecurity's Trivy scanner force-pushed malware into version tags across trivy-action and setup-trivy, exploiting the gap left by an earlier, incomplete rotation.
Sep 16, 20265 min read
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.