Pipeline credential theft via malicious release artifacts

Malicious code in Aqua Security Trivy 0.69.4 and related GitHub Actions allows attackers to steal CI secrets during workflow execution. Compromised release credentials let the attacker replace Action tags; injected entrypoint.sh and action.yaml code reads runner memory and credential files, encrypts the contents, and sends them to attacker-controlled infrastructure. Exposure requires executing a compromised binary, image, or mutable Action reference during the documented windows; affected jobs expose accessible pipeline credentials and files.