Breakdown of the Trivy GitHub Actions attack, including workflow misconfigurations, token theft, and supply chain exposure.

If you're paying for software features you're not even using, consider scripting them.