Supply chain security incident at CircleCI: Rotate your secrets

CircleCI: The World's Largest Shared CI/CD Platform for Software Delivery

CircleCI is the world's largest shared continuous integration and continuous delivery (CI/CD) platform, serving as a central hub where code

Trivy Vulnerability Scanner Compromised in Supply Chain Attack That Harvested CI/CD Credentials

The article details a sophisticated supply chain attack on Aqua Security's Trivy vulnerability scanner in March 2026, where attackers inject

Trivy GitHub Actions Compromised in Supply Chain Attack, Exposing CI/CD Secrets

A new supply chain attack targeting Trivy's GitHub Actions has been disclosed, where attackers compromised the security scanner by force-upd

Cordyceps CI/CD vulnerability exposes supply chain risks across major tech organizations

Security research from Novee Security reveals a CI/CD weakness called "Cordyceps" that allows unauthenticated GitHub users to hijack trusted

CircleCI launches "Chunk" — pre-commit microbuild validation for AI-generated code

CircleCI introduces "Chunk" — a new feature that runs microbuilds before code is committed, allowing AI agents to validate code in a real CI

The Mastra supply chain attack wasn't about AI