Post #2709135

I had known about the Trivy attack, but didn’t know the details. This article goes into some detail : https://rosesecurity.dev/2026/03/24/sha-pinning-is-not-enough.html