DevOps Articles

Curated articles, resources, tips and trends from the DevOps World.

Trivy, KICS, and the shape of supply chain attacks so far in 2026

1 month ago 1 min read www.docker.com

Summary: This is a summary of an article originally published by Docker Feed. Read the full original article here →

Catching the KICS push: what happened, and the case for open, fast collaboration In the past few weeks we've worked through two supply chain compromises on Docker Hub with a similar shape: first Trivy, now Checkmarx KICS. In both cases, stolen publisher credentials were used to push malicious images through legitimate publishing flows. In both...